The Department of Homeland Security worked to repair holes in its learnedness systems in the end year, but ongoing weaknesses dogged the agencys networks, intimately notably in managing IT warrantor. According to a July audit earn from KPMG LLP released last week, the DHS did not correct vulnerabilities in coming go throughs and systems soft contendgon that had been set previously, limiting its ability to ensure that data is kept up(p) with confidentiality, virtue and availability. The audit foc affaird on the agencys financial reporting, and the weaknesses found had a negative impact on the financial internal controls, in particular. One of the most signifi arseholet problems was found with access control deep down the departments firewalls. Reminiscent of the weak yellow sticky note war cry system found all too a good deal in the private sector, uptakers at the DHS were roughtimes able to use sensitive testing and development devices with a group countersign o r system default password. Are biometrics the dish up out to the password problem? Click here to use up more. power inside the organization who best understand the organizations systems, applications and stage business processes are able to make unauthorized access to some systems and applications, KPMG warned.
As a result, test and development devices could be a head of hackers/crackers to obtain information (i.e., user password listings) that can be used to attempt further access into DHS IT environment. KPMG as well found that many user accounts were not configured for involuntary log-off or lockout and that some workstations and servers were configured without necessity sec urity patches. remainder year, the DHS too! k several steps to correct IT security weaknesses, such as completing agencywide training and awareness sessions and pitiful to consolidate IT functions throughout the department. Another area of potential exposure for the DHS is in segregating duties that have-to doe with access to sensitive data. KPMG noted that notwithstanding previous...If you want to charm a full essay, order it on our website: OrderEssay.net
If you want to get a full information about our service, visit our page: write my essay
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.