Poor DOI data center security could expose sensitive info

Federal Times: An evaluation of select information technology security controls within a Department of Interior data center has found more than 20,000 critical, high-risk vulnerabilities left unmitigated on 24 systems owned by the Bureau of Indian Affairs and the Bureau of Indian Education

An inspector general review of the Continuous Diagnostics and Mitigation program found it to be immature and not fully effective in offering protection to personally identifiable information. Management practices did not support the capacity for BIA systems to identify unauthorized computer access or detect and remove potential malware.

Read article