Agencies should evaluate contractors for security readiness

The Federal Aviation Administration isn’t the only recent victim of a data breach. Hackers recently broke into USAJobs.com, which houses personal information on thousands of federal job seekers.

The site runs on Monster.com’s platform, and the breach, which occurred in January, included Monster, too. It provoked a debate on the wisdom of outsourcing services, especially considering the potential for identity theft using stolen job-seeker data.

Occasional data breaches will happen no matter how secure a system is, said Jonathon Giffin, an assistant computer sciences professor at the Georgia Institute of Technology.

“The government is actually behaving appropriately,” he said. “They are not experts in data security or in running a Web site that advertises jobs. Contracting that out to a company that has that expertise I think makes a lot of sense.”

But agencies can take steps to minimize the risk of lax treatment of sensitive information by an outside service provider, said Rohyt Belani, a security expert and professor at Carnegie Mellon University. Agencies should study audits of the systems that the technology providers use and investigate employee-awareness programs they have in place.

Employees who are trained to spot fraudulent e-mails – the phishing attacks that can trick employees into revealing passwords, giving the hackers a way into the system – are unlikely to fall for them, he said.

Market pressures also help provide a layer of security when government agencies outsource services, Giffin said. If a service provider has repeated security breaches, agencies are free to find another provider with better security policies.

About the Author

Doug Beizer is a staff writer for Federal Computer Week.

Featured

  • IT Modernization
    shutterstock image By enzozo; photo ID: 319763930

    OMB provides key guidance for TMF proposals amid surge in submissions

    Deputy Federal CIO Maria Roat details what makes for a winning Technology Modernization Fund proposal as agencies continue to submit major IT projects for potential funding.

  • gears and money (zaozaa19/Shutterstock.com)

    Worries from a Democrat about the Biden administration and federal procurement

    Steve Kelman is concerned that the push for more spending with small disadvantaged businesses will detract from the goal of getting the best deal for agencies and taxpayers.

Stay Connected