Audit reveals new IT security weaknesses

The Federal Law Enforcement Training Center did not make much progress in addressing previously identified security weaknesses in its computer infrastructure last year, according to a new audit released by Homeland Security Department Inspector General Richard Skinner.

The center completed work on only two previous information technology security-related recommendations during the year. It also received 20 reissued notices of IT weaknesses, and nine notices of new IT weaknesses, the audit  said.

The audit of fiscal 2007 IT controls was performed by the KPMG LLP accounting firm, which developed a Notice of Findings and Recommendations for each control weakness it identified.

The weaknesses ranged across broad areas. For example, 21 of 30 randomly surveyed contractors for the center did not have appropriate background investigations.

The audit also found problems with access control, application development and controls, and software security.

About the Author

Alice Lipowicz is a staff writer covering government 2.0, homeland security and other IT policies for Federal Computer Week.

Featured

  • Workforce
    Avril Haines testifies SSCI Jan. 19, 2021

    Haines looks to restore IC workforce morale

    If confirmed, Avril Haines says that one of her top priorities as the Director of National Intelligence will be "institutional" issues, like renewing public trust in the intelligence community and improving workforce morale.

  • Defense
    laptop cloud concept (Andrey Suslov/Shutterstock.com)

    Telework, BYOD and DEOS

    Telework made the idea of bringing your own device a top priority as the Defense Information Systems Agency begins transitioning to a permanent version of the commercial virtual remote environment.

Stay Connected