Energy IG finds flaws in DOE IT security

The Energy Department's efforts to protect information systems that contain national security information are falling short, the department's inspector general has found.

In an audit report released recently, the IG reported weaknesses in five of the six facilities included in the audit. The review is the latest of several the IG has conducted of the department's certification and accreditation process.

Specifically, the IG found that:


  • At five of the six facilities audited, security plans did not addres risks such as classified and unclassified systems operating in the same environment.

  • In many cases, department officials were not approving security plans and changes to systems.

  • In some cases, the plans did not accurately reflect the environment they pertained to.

  • Five of the six sites did not have contingency plans for handling service disruptions to national security information systems.


DOE managers agreed with two of the IG's recommendations and disagreed with the other two.

About the Author

Technology journalist Michael Hardy is a former FCW editor.

Featured

  • FCW PERSPECTIVES
    sensor network (agsandrew/Shutterstock.com)

    Are agencies really ready for EIS?

    The telecom contract has the potential to reinvent IT infrastructure, but finding the bandwidth to take full advantage could prove difficult.

  • People
    Dave Powner, GAO

    Dave Powner audits the state of federal IT

    The GAO director of information technology issues is leaving government after 16 years. On his way out the door, Dave Powner details how far govtech has come in the past two decades and flags the most critical issues he sees facing federal IT leaders.

  • FCW Illustration.  Original Images: Shutterstock, Airbnb

    Should federal contracting be more like Airbnb?

    Steve Kelman believes a lighter touch and a bit more trust could transform today's compliance culture.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.