Cybersecurity

Broadcasting Board of Governors lacks cyber reporting system, IG says

concept cybersecurity art

The State Department's Office of Inspector General has criticized the Broadcasting Board of Governors' IT incident response and reporting program for "not operating effectively" in compliance with federal standards, according to a recent audit.

An effective incident response program is designed to detect cyber infiltrations and promote recovery, but auditors concluded that BBG, the State Department component that runs the Voice of America, did not achieve that goal.

In reviewing seven cybersecurity incidents that took place between October 2014 and May 2015, auditors determined that BBG did not comply with federal standards.

The board did not finalize its official incident response and reporting policy until May 7, 2015, but the report states that "even if the policies and procedures had been in place, the deficiencies would most likely have persisted." That's because the final policy did not comply with guidance from the U.S. Computer Emergency Readiness Team and the National Institute of Standards and Technology.

Furthermore, the policy lacked "essential processes...including risk assessment, host security, network security, malware prevention, and user awareness and training."

US-CERT requires agencies to report and designate a threat level (from zero to six) for all computer security incidents. Auditors concluded that "BBG did not assign category levels for any of the seven cybersecurity incidents tested."

Of those incidents, two unidentified breaches were not even reported to US-CERT, and a third was not reported in "a timely manner."

The report recommends that BBG amend its program to adhere to federal standards. BBG officials said they concurred with the recommendations.

About the Author

Chase Gunter is a staff writer covering civilian agencies, workforce issues, health IT, open data and innovation.

Prior to joining FCW, Gunter reported for the C-Ville Weekly in Charlottesville, Va., and served as a college sports beat writer for the South Boston (Va.) News and Record. He started at FCW as an editorial fellow before joining the team full-time as a reporter.

Gunter is a graduate of the University of Virginia, where his emphases were English, history and media studies.

Click here for previous articles by Gunter, or connect with him on Twitter: @WChaseGunter

Featured

  • Cybersecurity

    DHS floats 'collective defense' model for cybersecurity

    Homeland Security Secretary Kirstjen Nielsen wants her department to have a more direct role in defending the private sector and critical infrastructure entities from cyberthreats.

  • Defense
    Defense Secretary James Mattis testifies at an April 12 hearing of the House Armed Services Committee.

    Mattis: Cloud deal not tailored for Amazon

    On Capitol Hill, Defense Secretary Jim Mattis sought to quell "rumors" that the Pentagon's planned single-award cloud acquisition was designed with Amazon Web Services in mind.

  • Census
    shutterstock image

    2020 Census to include citizenship question

    The Department of Commerce is breaking with recent practice and restoring a question about respondent citizenship last used in 1950, despite being urged not to by former Census directors and outside experts.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.