Contractors fail to secure sensitive DOD information

data breach (LeoWolfert/Shutterstock.com)

Cyber

Contractors fail to secure sensitive DOD information

  • Jul 29, 2019

The Defense Department's unclassified information housed in contractor networks has not been adequately secured from cyberthreats, according to a new report from the department's inspector general.

After reviewing how DOD information is protected on contractor's networks and systems, the watchdog agency found that contractors failed to use multifactor authentication, enforce strong password use, identify and mitigate vulnerabilities or document and track cybersecurity incidents. Administrators also improperly assigned access privileges that did not align with users' responsibilities, the report stated.

According to the IG, the department "does not know the amount of DOD information managed by contractors and cannot determine whether contractors are protecting unclassified DOD information from unauthorized disclosure."

Moreover, the report cited a specific incident in which neither the Defense Threat Reduction Agency nor the contractor involved appropriately addressed the "spillage of classified information to unclassified cloud, internal contractor network and webmail environments…. As a result, classified information remained unprotected on the commercial cloud and the webmail server for almost two years."

The IG issued 25 recommendations, including raising the password character minimum to 15 and locking accounts for inactivity after 15 minutes. The principal deputy CIO disagreed with those specific recommendations, and the IG has asked for more input on implementing the measures.

The report coincides with two recent reports from the Government Accountability Office. One recommended that federal agencies bolster their cyber risk management and that the Department of Homeland Security take the lead in establishing guidance. The other said the Office of Management and Budget should conduct more CyberStat reviews with agencies.

This article was first posted to FCW, a sibling site to Defense Systems.


Let's block ads! (Why?)



from All Articles and Blogs https://ift.tt/2Msvr5R
via Defens News

Comments

Post a Comment

Popular posts from this blog

The Oryx Handbook of Iranian Drones

Image
The goal of this list is to comprehensively catalogue Iran's past and current inventory of unmanned aerial vehicles (UAVs) and their armament. In an effort to streamline the list and avoid unnecessary confusion, this list only includes military drones associated with Iran's defence industry or military-grade UAVs with at least some chance of entering service. Notes:  - If several configurations of a drone with one designation are known, they are added as such.  - The part within the apostrophes refers to other designations or an unofficial designation. -  UAVs that did not enter service or have yet to enter service have been placed in the prototype category. - When a type is dual-capable, it is added in both respective categories. - Dubious claims are referred to as ''claimed to be capable''. - Although several types of Iranian UAVs have been sighted in Syria and Iraq, the foreign service section of this handbook only includes those confirmed to be in s
Read more

1762. 🇲🇺 Mauritius Commemorates Historic Post Office Building.

Image
 ðŸ‡²ðŸ‡º Mauritius Post will issue a single stamp on 28 October 2020 to commemorate the 150th anniversary of the Central post office in Port Louis, the capital of Mauritius. An interesting stamp. Rating:- ***. 🇵🇰 Pakistan Post issued a single stamp on 24 October 2020 to commemorate the 75th anniversary of the founding of the United Nations Organisation. The stamp was designed by Murghiz Khan and lithographed by National Security Printing Company Karachi and is perforated 13. Rating:- **. 🇲🇿 Correios de Moçambique   has issued a single stamp on an as yet unknown date to commemorate International Day of Family Remittances which occurred on 16 June 2020 (which of course may have been the day of issue). Thanks to super for drawing my attention to the issue in a comment left at the end of Blog 1762 which referenced an item on the excellent Joint Stamps site which in turn had received news of the issue from Nejmeddine Boudaren of Aurescollections . The stamp ap
Read more

Christie[s Impressionist and Modern Art Day Sale May 13

Image
LOT 610 PAUL SIGNAC (1863-1935) Port-en-Bessin, L'avant-port EstimateUSD 700,000 - 1,000,000 FOLLOW LOT 617 PIERRE-AUGUSTE RENOIR (1841-1919) Jeune femme à la rose EstimateUSD 500,000 - 700,000 FOLLOW LOT 625 PIERRE BONNARD (1867-1947) Femme à l'aigrette EstimateUSD 400,000 - 600,000 FOLLOW LOT 634 EDGAR DEGAS (1834-1917) Rue de village EstimateUSD 400,000 - 600,000 FOLLOW LOT 641 PIERRE BONNARD (1867-1947) Au casino EstimateUSD 600,000 - 800,000 FOLLOW LOT 643 PABLO PICASSO (1881-1973) Le peintre et son mod è le EstimateUSD 2,500,000 - 3,500,000 FOLLOW LOT 664 FERNAND LÉGER (1881-1955) La fleur noire EstimateUSD 500,000 - 700,000 FOLLOW LOT 671 BARBARA HEPWORTH (1903-1975) Two Small Forms EstimateUSD 500,000 - 800,000 FOLLOW LOT 675 MARC CHAGALL (1887-1985) Autour du coq rouge EstimateUSD 1,500,000 - 2,000,000 FOLLOW LOT 679 FERNAND LÉGER (1881-1955) Une figure dans un paysage EstimateUSD 400,000 - 600,000 FOLLOW LO
Read more