Information security incidents by agency

The Office of Management and Budget's annual report to Congress on the Federal Information Security Management Act details which agencies are getting hit and how.

The Office of Management and Budget's latest report to Congress on the Federal Information Security Management Act offers a wealth of data on the state of federal information security -- including agency-by-agency breakdowns of incidents reported to the Department of Homeland Security's U.S. Computer Emergency Readiness Team.

Among 24 major agencies, the Department of Veterans Affairs reported the most incidents in fiscal 2013 with 11,368, while the National Science Foundation logged the fewest at 46. Agency totals, as well as breakdowns for VA and NSF, are detailed below.

Incidents by agency

Information security incidents reported to US-CERT in fiscal 2013.

Incidents by type

Department of Veterans Affairs

National Science Foundation

Department of Veterans Affairs Types of Incidents National Science Foundation
2161 Equipment 1
2505 Policy Violation 3
4806 Non Cyber & Other 8
152 Suspicious Activity 27
55 Unauthorized Access &
Improper Usage
1
3 Denial of Service (DoS) 0
1599 Malicious Code 4
87 Social Engineering & Phishing 2

SOURCE: GAO. Read the report.

NEXT STORY: GAO nudges DHS on high-risk areas