Letter: Don't blame contractors for data leaks

Regarding "DOD: Controlled but unclassified data is leaking"

As a defense contractor and consultant, it always irks me to see articles where individuals like me are considered part of the problem.

It has been my experience that the real problems are Defense Department civilian personnel. Not so much the actual war-fighters/uniform wearers as they understand what can happen, but mostly government workers.

I have personally worked on DOD systems where there was, and probably still is, no control of USB devices, no control over CD or other media and no configuration control on the network period.

As an example, I recently witnessed a government person using a commercially purchased, personal USB thumb drive to bring files back and forth from home to a DOD network so that he could work at his convenience. This same individual (a system administrator) also used the same USB device to transfer operating system patches downloaded from a commercial vendor to upload patches to a classified system.

I have also personally found USB drives lost in parking lots surrounding the workplaces that, when inserted into a standalone system, revealed not only malicious code, but sensitive, unclassified DOD information.

I have also denied government workers access to DOD networks with computers they "bought" so that they could have the latest and greatest hot computer (think Lenovo). The real issue is that these types of people think that the government-provided computer is their personal system and not subject to any regulation or control. They even refer to it as "my computer" and believe that it is their personal system and what they do on it or with it is somehow considered "private communications" and not subject to audit or monitor.

We all read about a laptop left in a car and being stolen or lost. Do people read these articles and ask, "Who lost it?" Generally, it is some government civilian who is careless while in public and during travel.

Instead of DOD and the federal government saying that contractors expose the networks or information, I suggest they clean up their own house first.

Jack

What do you think? Paste a comment in the box below (registration required), or send your comment to letters@fcw.com (subject line: Blog comment) and we'll post it.

Featured

  • Defense
    Ryan D. McCarthy being sworn in as Army Secretary Oct. 10, 2019. (Photo credit: Sgt. Dana Clarke/U.S. Army)

    Army wants to spend nearly $1B on cloud, data by 2025

    Army Secretary Ryan McCarthy said lack of funding or a potential delay in the JEDI cloud bid "strikes to the heart of our concern."

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.