Two stories this week underscore the federal government. First, and most notable is the ongoing saga of the breach of security systems at the Office of Personnel Management (OPM). In testimony before Congress this week, that agency The link for this article located at Security Ledger is no longer available. . The 2015 OPM security breach exposed significant flaws in federal data protection, risking over 20 million individuals' sensitive information and prompting urgent cybersecurity reforms. Federal Information Security,Cybersecurity Challenges,Government Security. . Dave Wreski
A breach of U.S. government computers. The revelation comes from a letter by federal union boss J. David Cox to the U.S. Office of Personnel Management: The link for this article located at Gawker is no longer available. . The revelation comes from a letter by federal union boss J. David Cox to the U.S. Office of Personne. breach, government, computers, revelation, comes, letter, federal, union. . LinuxSecurity.com Team
Cybersecurity coordinator Howard Schmidt also announces release of unclassified version of Obama administration's plan for securing government, private industry networks. During a Town Hall meeting session here today, the nation's new cybersecurity czar mapped out his top priorities in the post and provided a glimpse at how the Obama administration might handle security issues with other countries.. In a keynote address earlier in the day, national cybersecurity coordinator Howard Schmidt also announced that the White House was releasing an unclassified version of its plan for securing government and private industry networks -- the so-called Comprehensive National Cybersecurity Initiative, which is now available for download from the White House Website (PDF). Among Schmidt's priorities are the "resilience" of federal government networks and ensuring those networks are properly secured, and ensuring that private-sector partners also have sufficiently secured systems and networks. "The government is not going to secure the private sector," Schmidt said. "[But] we are making sure our [private sector] partners have more security as part of what we're doing." And when it comes to security incident response (IR), he says, these firms have not had a central point of contact. He says he's looking over IR issues for these partners, who want to know who to call when an incident occurs and how to protect their intellectual property. Schmidt says he also wants to ensure state and local governments have law enforcement cyber operations. The link for this article located at Dark Reading is no longer available. . In a keynote address earlier in the day, national cybersecurity coordinator Howard Schmidt also anno. cybersecurity, coordinator, howard, schmidt, announces, release, unclassified, version, obama. . Alex
It has been five years since hijackers slammed jetliners into the World Trade Center and the Pentagon, killing nearly 3,0000 people, but nine out of 10 information security professionals believe federal government agencies are unprepared should the terrorist attacks turn to cyberspace. According to a poll conducted by vulnerability and risk management provider nCircle of 395 IT executives, 85 percent believe federal government is not ready for a cyber version of Sept. 11, 2001. . "I would fully agree with that," said Paul Kurtz, executive director of the Cyber Security Industry Alliance. "We have no leadership at DHS (U.S. Department of Homeland Security) right now. We do not have a clear path for the roles and responsibilities, legal issues and policy issues that would surface during such a crisis." Earlier this year, during the Federal Information Security Management Act (FISMA) grading of network security postures, 24 federal agencies received an average of D+, with seven agencies outright failing. The link for this article located at SCMagazine is no longer available. . Cybersecurity experts raise alarms regarding the government's lack of readiness for cyberattacks in the aftermath of the 9/11 tragedy.. Cyber Threat Preparedness, Federal Cybersecurity Challenges, Cybersecurity Assessment, IT Security Readiness. . Brittany Day
Although it's less well known than some of the standards and models in place at many businesses today, an emerging framework being used within the federal government could help organizations improve their security, according to information security experts. NIST 800-53 was created in 2005 by the National Institute of Standards and Technology, as required by the Federal Information Security Management Act of 2002. It provides guidelines for selecting and specifying security controls for information systems that support the executive agencies of the U.S. government. . The link for this article located at ComputerWorld is no longer available. . The NIST framework, developed to combat cyberattacks on critical infrastructure, guides organizations in managing cybersecurity risks since 2014, promoting collaboration among stakeholders. NIST 800-53 Framework, Federal Security Measures, Information Security Guidelines. . Benjamin D. Thomas
The governmentwide information security report released last month by the Office of Management and Budget is the first serious effort to bring together the executive and legislative branches to solve the monumental job of securing federal systems, which, admittedly, have as many holes as Swiss cheese.. . .. The governmentwide information security report released last month by the Office of Management and Budget is the first serious effort to bring together the executive and legislative branches to solve the monumental job of securing federal systems, which, admittedly, have as many holes as Swiss cheese. The report, required by the Government Information Security Reform Act of 2000, was refreshingly honest. Indeed, many federal systems have serious security weaknesses. But that wasn't the big news laid out in the GISRA report. Rather, the report now organizes secu.rity data into a matrix that the White House and Capitol Hill can use to pinpoint problems and work toward a solution. The report should provide a blueprint for Congress, which, as a whole, has shown that it does not fully understand the shortcomings of federal information security and its consequences. It was just a few years ago, when compiling the Defense Department's fiscal 1999 budget, that the Senate Appropriations Committee nearly zeroed out DOD's $70 million budget to fight information warfare and replaced it with a $500,000 line item for software security research. The budget was later reinstated. Agencies have not been without fault, either. Many are just now putting in place security policies required by the 15-year-old Computer Security Act. The link for this article located at FCW is no longer available. . The governmentwide information security report released last month by the Office of Management and B. governmentwide, information, security, report, released, month, office, management. . Anthony Pell
Federal chief information officers are concerned that hackers will gain control of federal computers and damage Web sites or hurt the systems of other agencies, according to a new survey. The survey, conducted by the System Administration, Networking, and Security (SANS) . . . . Federal chief information officers are concerned that hackers will gain control of federal computers and damage Web sites or hurt the systems of other agencies, according to a new survey. The survey, conducted by the System Administration, Networking, and Security (SANS) Institute of Bethesda, Md., queried 15 CIOs, 11 chief information security officers and 30 network security administrators. The link for this article located at GovExec is no longer available. . Federal chief information officers are concerned that hackers will gain control of federal computers. federal, chief, information, officers, concerned, hackers, control, computers. . Anthony Pell
Federal agency heads must ensure that their information systems are secure under a provision of the fiscal 2001 defense authorization bill that gained Senate approval late last week.The provision, S. 1993, co-sponsored by Sens. Fred Thompson, R-Tenn., and Joseph Lieberman, D-Conn., . . . . Federal agency heads must ensure that their information systems are secure under a provision of the fiscal 2001 defense authorization bill that gained Senate approval late last week.The provision, S. 1993, co-sponsored by Sens. Fred Thompson, R-Tenn., and Joseph Lieberman, D-Conn., provides a managerial framework for protecting federal computer records from hackers, cyberterrorists, and accidental or careless unauthorized disclosure. Thompson has called agencies' current method of dealing with such problems a "band-aid approach." The link for this article located at GovExec is no longer available. . Leaders of federal agencies must improve safeguards for data systems as stipulated by S. 1993.. Federal Agencies,Cybersecurity Compliance,System Protection. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.