AOH :: IS1263.HTM

IG: DHS lax on portable device security controls




IG: DHS lax on portable device security controls
IG: DHS lax on portable device security controls



  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--1457021584-1158907634-1224222066=:18655
Content-Type: TEXT/PLAIN; CHARSET=UTF-8
Content-Transfer-Encoding: QUOTED-PRINTABLE
Content-ID:  

http://www.fcw.com/online/news/154093-1.html 

By Alice Lipowicz
FCW.com
October 16, 2008

The Homeland Security Department has not deployed effective controls on 
portable storage devices that may be attached to its unclassified 
computer systems, according to an audit report [1] from DHS Inspector 
General Richard Skinner released today.

=E2=80=9CDHS has not implemented effective controls to restrict unauthorized 
devices from being connected to DHS=E2=80=99 unclassified systems,=E2=80=9D the audit 
stated.

The proliferation of portable storage devices that include external hard 
drives, flash drives and jump drives has been recognized as a risk for 
computer security. If unauthorized devices are connected to a federal 
network, that may result in unauthorized access or theft of sensitive 
information.

During the audit, which was performed from February to May, the IG 
identified unauthorized data storage devices connected to departmental 
servers and workstations at 11 DHS component agencies, though it was not 
clear whether the devices were functioning or whether data had been 
transferred from those devices.

[1] http://www.dhs.gov/xoig/assets/mgmtrpts/OIG_08-95_Sep08.pdf 

[...]


--1457021584-1158907634-1224222066=:18655
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

__________________________________________________      
Register now for HITBSecConf2008 - Malaysia! With 
a new triple-track conference featuring 4 keynote 
speakers and over 35 international experts, this 
is the largest network security event in Asia and 
the Middle East! 
http://conference.hackinthebox.org/hitbsecconf2008kl/ 
--1457021584-1158907634-1224222066=:18655--

Site design & layout copyright © 1986-2014 CodeGods