VA to certify project security

VAnguard June/July 2001

The new cybersecurity chief at the Department of Veterans Affairs said program managers will be asked to sign a contract certifying that they have installed security protections with every project they build.

Bruce Brody, associate deputy assistant secretary for cybersecurity, said the new policy creates departmentwide security requirements and is necessary because security is often overlooked.

"There's a lot of independent action going on," he said. "It's the renegades. It's the people who can put an uncertified network up there."

A separate telecommuting policy — still in draft stages and due out later this year — will also highlight security issues, Brody said. That policy will require workers who telecommute to use a computer strictly dedicated to VA work, he said. Not long ago, an employee in the Midwest connected to his office using a personal computer and transmitted a virus to VA headquarters.

Featured

  • Defense
    Ryan D. McCarthy being sworn in as Army Secretary Oct. 10, 2019. (Photo credit: Sgt. Dana Clarke/U.S. Army)

    Army wants to spend nearly $1B on cloud, data by 2025

    Army Secretary Ryan McCarthy said lack of funding or a potential delay in the JEDI cloud bid "strikes to the heart of our concern."

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.