Government Accountability Office Report Slams FBI Internal Security

The New Acunetix V12 Engine


Ah, FBI slammed again, it’s not the first time this has happened.

Remember when a Consultant Breached FBI’s Computers?

It also reminds me of when Homeland Security Scored an F for Internal Security AGAIN

The Government Accountability Office, the federal government’s watchdog agency, Thursday released a report critical of the FBI’s internal network, asserting it lacks security controls adequate to thwart an insider attack.

In the report, titled “Information Security: FBI Needs to Address Weaknesses in Critical Network,” the authors — Gregory Wilshusen, GAO’s director of information security issues, and Chief Technologist Keith Rhodes — said the FBI lacks adequate network security controls.

The FBI “has an incomplete security plan,” the report concluded.

Those who are supposed to protect eh?

The bureau, which had the opportunity to review the GAO’s findings before publication, responded that it wasn’t arguing with some of the technical observations expressed in the GAO report, but disagreed that the FBI is open to unacceptable risk of an insider attack.

In a letter of response to the GAO, Dean Hall, the FBI’s deputy CIO, and Zalmal Azni, the FBI’s CIO, noted, “The FBI concurs with many of the GAO’s technical recommendations and the programmatic recommendation to continue the implementation of information security activities in order to fully establish a comprehensive Information Assurance Program.”

Let’s hope they can make less excuses and just sort it out.

Source: PC World

Posted in: Hacking News

,


Latest Posts:


Acunetix Vulnerability Scanner For Linux Now Available Acunetix Vulnerability Scanner For Linux Now Available
Acunetix Vulnerability Scanner For Linux is now available, now you get all of the functionality of Acunetix, with all of the dependability of Linux.
Gerix WiFi Cracker - Wireless 802.11 Hacking Tool With GUI Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI
Gerix WiFi cracker is an easy to use Wireless 802.11 Hacking Tool with a GUI, it was originally made to run on BackTrack and this version has been updated for Kali (2018.1).
Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.
Eraser - Windows Secure Erase Hard Drive Wiper Eraser – Windows Secure Erase Hard Drive Wiper
Eraser is a hard drive wiper for Windows which allows you to run a secure erase and completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.
Insecure software versions are a problem Web Security Stats Show XSS & Outdated Software Are Major Problems
Netsparker just published some anonymized Web Security Stats about the security vulnerabilities their online solution identified on their users’ web applications and web services during the last 3 years.


3 Responses to Government Accountability Office Report Slams FBI Internal Security

  1. Alfred Farrington June 21, 2007 at 1:35 am #

    Hmmm seems like they are spending alot of money and still can’t get it right. Seems like our same good ol government.

  2. Bogwitch June 21, 2007 at 2:00 pm #

    The article paints an all-too-familiar story – IT and security departments taking the blame for a lack of funding.
    I have no doubt that agencies like the FBI rely too heavily on staff vetting which, unfortunately, is not completely reliable. Just because someone has passed a background check, does not always mean they are trustworthy….
    However, the biggest problem is convincing any organisation that investment in information security is worthwhile. It is very difficult to convince organisations to perceive that there is a return on investment let alone to attempt to calculate that return.
    Until this happens, IT departments and information security departments will always take the blame for poor security management.

  3. Sandeep Nain July 11, 2007 at 1:56 am #

    Well i am sure their budget does have a huge amount sanctioned for IT Security.. and that money must have been shown used too…

    is it just me who is thinking that… management over their is just assuming that their infrastructure is secure and putting the money in their bank accounts instead…

    sounds like corruption to me and not just the IT (in)security