February 10, 2008   Sign In |  About ebizQ |  Contact Us |  Join ebizQ Gold Club
Andre Yee
Andre Yee's Security Insider
An open dialogue about security and compliance for the enterprise.

« Software AG Announces Webmethods Acquisition | Main | Should the Security Industry Exist? »

April 18, 2007
Homeland Security Improves Cyber-Security Grade

Feel any safer, at least on the cyber security front? Well, the Department of Homeland Security scored it's first ever non failing grade on cyber-security. Not that it's anything to write home about. The DHS who has received an F for cyber-security, improved to a staggering D in this year's report from the U.S. House of Representatives Committee on Government Oversight.

There were overall signs of optimism as a number of departments improved. At the head of the class were the DOJ, improving from D to A and HUD, going to A+ from D+, the prior year. Unfortunately, NASA scores went down (B- to D-) while Department of Education received an F.

These scores are predicated on agency compliance with the federal law known as the Federal Information Security Management Act of 2002 (FISMA). FISMA established a broad framework of requirements, related to establishing information security programs, security product certification and training.

In my opinion, FISMA isn't necessarily the best indicator of security compliance. I think that it has become a little unwieldy and ill defined when applied to security products certification. But it's certainly one indicator and the fact that some agencies have declined in their security score makes you wonder if they are taking it seriously enough.

Unfortunately, there is little consequence except the public embarrassment that accompanies a low score.

Posted by andreyee in Odds and Ends |Digg This|Add to del.icio.us

Trackback Pings

TrackBack URL for this entry:
http://www.ebizq.net/mt/mt-tb.cgi/1709

Comments Post a comment




Remember Me?

(you may use HTML tags for style)

We ask that you type your code (displayed below) in the text box.This code is an image that cannot be read by a machine. It prevents automated programs from submitting comments.


Code:



Most Recent ebizQ Blog Entries
ADVERTISEMENT
RSS Subscription

Blog Roll
This Work
Accountability:The opinions expressed in this blog are solely representative of the blog's author, and not of ebizQ

Subscribe to our Newsletters
ebizQ Weekly Gold Club Update
Live Webinar Updates
Updates from ebizQ Partners
ebizQ SOA Update
ebizQ BPM Update
ebizQ Security Update
ebizQ BI Update
ebizQ Open Source Software Update
Virtual Show Newsletter
Your E-mail Address:
BAM: The Killer App for CEP
Date: Feb 12, 2008
Time: 12:00 PM ET
(17:00 GMT)

I WANT TO ATTEND
Event Processing Market Pulse
Date: Feb 14, 2008
Time: 12:00 PM ET
(17:00 GMT)

I WANT TO ATTEND
Archived Webinars | Upcoming Webinars

Marketing Solutions | Feedback | About ebizQ | Unsubscribe | Privacy Policy | Site Map