EPA's Southeast office lacked proper security controls for sensitive data, OIG says

FedScoop: An Environmental Protection Agency office allowed server access to sensitive information without monitoring whether users had permission to view it, an inspector general’s report has found.

The report, released Wednesday, found that the EPA’s Region 4 office lacked the required security controls for accessing its shared information folder on the Superfund Enterprise Management System and thus failed to monitor whether users had the proper authorization to access it. Region 4 serves eight states in the Southeast.

Read article