DHS fails to plug intelligence security holes identified in 2007 audit

In a cryptic summary of a 2011 classified audit of the department’s intelligence systems’ security program, the OIG said that “management oversight and operational issues remain regarding the effectiveness of the program.”

In addition, the OIG expressed “concerns” with the documentation for the Coast Guard Intelligence Support System certification and accreditation package and the information security training and awareness program for intelligence personnel. “Also, we identified security issues with the Classified Local Area Network and Coast Guard Intelligence Support System”, the summary continued.

In a 2009 report on DHS’ security program for intelligence systems, the OIG also cited the department for lax management oversight of the program and an inadequate information security training and awareness program for intelligence personnel. These were issues also identified in the OIG’s 2007 audit of the security program, according to the 2009 summary.

DHS concurred with the OIG’s recommendations in the 2011 audit to fix the problems; the recommendations, however, were not provided in the unclassified summary. The OIG said that the department's undersecretary for intelligence and analysis should address the open recommendations identified in the audit.

What’s hot on Infosecurity Magazine?