The Department of Homeland Security is quite literally tasked with protecting the United States through law enforcement and handling emergencies. That should mean that they need to maintain security in their own actions, but this is not the case when it comes to computer security. This can harm national security on several levels, which can lead to harm to the citizens of this nation. A recent DHS OIG reports on how three agencies within the Department are not utilizing necessary security.
OIG Findings
Here, via the OIG report, is how agencies of the DHS are not complying with computer security.
“Department of Homeland Security components did not consistently apply information technology (IT) access controls to ensure only authorized personnel had access to systems, networks, and information. This capping report summarizes access control practices and deficiencies reported in three components — U.S. Citizenship and Immigration Services (USCIS), Federal Emergency Management Agency (FEMA), and U.S. Immigration and Customs Enforcement (ICE) — over the last 12 months.
We determined USCIS, FEMA, and ICE did not consistently manage or remove access when personnel separated or changed positions. Also, USCIS, FEMA, and ICE did not take all necessary steps to ensure privileged user access was appropriate and that service accounts were adequately secured. These deficiencies stemmed from insufficient internal controls and oversight to ensure access controls were administered appropriately.
In addition to access control deficiencies, we found that USCIS, FEMA, and ICE did not implement all required security settings and updates for their IT systems. This occurred because the components were concerned these IT controls might negatively impact operations. We also found that DHS’ information security framework did not include the latest Federal requirements for access controls. DHS’ overall security posture relies on all components to implement effective IT access controls. Therefore, it is critical for USCIS, FEMA, and ICE to complete the corrective actions needed to fully address the deficiencies and the remaining 24 open recommendations made in our three prior reports.”
Report Conclusions
“DHS components’ access control deficiencies increase the risk that unauthorized individuals could access sensitive information or disrupt mission operations. Based on the conditions outlined in this report, USCIS, FEMA, and ICE access control and system security deficiencies may limit the Department’s ability to reduce the risk of unauthorized access to its network and data. These deficiencies may also hinder DHS in efforts to mitigate the impact to operations if access control weaknesses are exploited. Although DHS and its components have begun taking steps to address our prior recommendations, it is critical for the Department to complete the corrective actions included in our 24 open recommendations to fully address the deficiencies in its operations.”
The security of the United States by a government department specifically created to do just that should not have any deficiencies. People's lives are at stake, as is the prevention of terrorist attacks. This needs to be highlighted for what it is and people need to demand it is fixed. No part of the government should allow itself to end up in a situation like this. People need to be aware of these dangers created by those tasked with our protection.
See my content at: https://www.facebook.com/PaulShannonRamblings/
Help support me at: https://www.patreon.com/FreedomVN

Comments
Post a Comment