Tag:

POA&Ms

Latest Headlines

Latest Headlines

Auditors find ongoing FISMA weaknesses at VA

Widespread cybersecurity vulnerabilities continue to trouble the Veterans Affairs Department, including “significant deficiencies” in closing known problems, says the VA office of...

NRC cybersecurity hole remediation needs work, says audit firm

Remediation of cybersecurity vulnerabilities continues to remain a problem at the Nuclear Regulatory Commission, says a recently released annual audit of agency systems conducted under the Federal

DOT continues to lag on resolving cybersecurity problems

The Transportation Department continues to have difficulty remediating cybersecurity vulnerabilities, the departmental inspector general says in an annual assessment on Federal Information Security...

GSA not implementing cybersecurity policies, says IG

The General Services Administration doesn't lack cybersecurity policies, it just isn't necessarily enforcing them, according to the GSA inspector general. In an annual review of agency cybersecurity

Commerce Department cybersecurity not adequate, say auditors

Commerce Department cybersecurity is "not adequate," says an annual inspector general review. The audit, dated Nov. 15, also says that the likelihood of security breaches at the department are

DOT auditors fault CIO cybersecurity hole prioritization policy

A new Transportation Department chief information officer policy for prioritizing the remediation of cybersecurity vulnerabilities wrongly incentivizes staff to resolve low-priority weaknesses before

GAO: 'Significant' cybersecurity weaknesses at NARA

A whole slew of cybersecurity problems plague the National Archives and Records Administration, says the GAO in a Oct. 21 report. An almost yearlong assessment of security controls by GAO auditors

NASA CIO unaware of cybersecurity holes, says IG

An audit of NASA cybersecurity practices during fiscal 2009 found that security control assessments and contingency plan testing went undone and that the NASA chief information officer was unaware of

High-risk vulnerabilities found in key US-CERT system

Scans of a key system utilized by the Homeland Security Department's cybersecurity operations arm revealed 202 unique high-risk vulnerabilities, according to the DHS inspector general. The

IRS needs better grip on contractors with taxpayer data access, says TIGTA

The Internal Revenue Service isn't quite sure how many private sector employees it should review each year for security purposes because of their access to taxpayer data, according to a new audit.