News

Federal Cyber Incidents Increased 650 Percent Over Five Years

The Government Accountability Office has released a report showing that  security incidents at 24 federal agencies have increased 650 percent during the last five years. The reason cited is due to a persistent shortcomings in security controls and a larger amount of sophisticated attackers.

GAO said it had previously made hundreds of recommendations on how to improve the agencies’ information protection practices and their compliance with the Federal Information Security Management Act, but although agencies mostly agreed with the need to beef up security, implementation was spotty and hacking and unauthorized access incidents continued to rise. As a result, the agencies had a 650 percent rise in security incidents, from 5,503 in fiscal 2006 to 41,776 in fiscal 2010, GAO said.

"Weaknesses in information security policies and practices at 24 major federal agencies continue to place the confidentiality, integrity, and availability of sensitive information and information systems at risk," GAO concluded.

"Until hundreds of recommendations are implemented and program weaknesses are corrected, agencies will continue to face challenges in securing their information and information systems," the report said.

Sen. Tom Carper (D-Del.) said the report adds urgency to the need to pass legislation he introduced with Sens. Joseph Lieberman (I-Conn.) and Susan Collins (R-Maine) to strengthen cybersecurity.

"These findings are all the more troubling given that GAO has been telling us for some time that these are areas of vulnerability and must be addressed, yet we still haven't made enough progress in shoring up these obvious weaknesses," Carper said. "Federal agencies need to fully implement meaningful security programs that can withstand the serious cyber challenges we face today and will face for the foreseeable future, and they need the proper oversight and guidance to accomplish that goal. The implementation of FISMA was a good start, but it is clear more steps need to be taken to enhance the federal government's information security."

The report recommended that the Office of Management and Budget provide performance targets for metrics included in its annual FISMA reporting instructions. OMB responded that it would be more appropriate for the Homeland Security Department to provide the metrics, and GAO agreed.

 

About the Author

Alice Lipowicz is a staff writer for 1105 Media's Washington Technology.

Featured

  • Microsoft Publishes Windows Deadlines on Upgrading to SHA-2

    Microsoft on Friday described its 2019 timeline for when it will start distrusting Shell Hashing Algorithm-1 (SHA-1) in supported Windows systems, as well as in the Windows Server Update Services 3.0 Service Pack 2 management product.

  • Performing a Storage Refresh on Windows Server 2016, Part 1

    To spruce up some aging lab hardware, Brien decided to make the jump to all-flash storage. Here's a walk-through of the first half of the process.

  • Datacenters Are Cooling Down as Buildouts Heat Up

    Tech giants Google, Apple and others are expanding their datacenter footprints at a rapid rate, and it's pushing the industry to find better ways to power all that infrastructure.

  • Vendors Issue Patches for Linux Container Runtime Flaw Enabling Host Attacks

    This week, the National Institute of Standards and Technology (NIST) described a high-risk security vulnerability (CVE-2019-5736) for organizations using containers that could lead to compromised host systems.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.