Five Years and Flunking: .. federal agencies .. flunking .. security

[struggle4progress]

Once again, Congress gave the largest federal agencies a near flunking grade for network security. Now what?

By Allan Holmes

The U.S. House Committee on Government Reform presented its annual cybersecurity report card in February. For the fifth consecutive year, the report gave the 24 federal agencies an overall grade of D-plus for securing networks that support government programs, public services and business operations. Seven agencies—including the departments of Homeland Security, Health and Human Services, and Commerce—received an F.

The congressional panel assigns grades based on audits conducted by agencies and inspectors general, who measure agencies' compliance with the Federal Information Security Management Act (Fisma). <snip>

DHS, which is responsible for preventing and responding to terrorist acts, received the lowest numerical score in the report—a 20.5, down from a 34 in 2003. (The numerical scores are translated into grades, with a score of 70 representing a passing grade of C-minus.) A lack of money and recent leadership changes in the Office of Management and Budget, Congress and in key IT positions in the Bush administration have taken the emphasis off IT security, says the DHS security officer, who adds that it is unlikely more money will be provided or leadership will change unless a crisis occurs. <snip>

http://www.csoonline.com/read/050105/wonk_five.html