« Software AG Announces Webmethods Acquisition | Main | Should the Security Industry Exist? »
April 18, 2007Homeland Security Improves Cyber-Security Grade
Feel any safer, at least on the cyber security front? Well, the Department of Homeland Security scored it's first ever non failing grade on cyber-security. Not that it's anything to write home about. The DHS who has received an F for cyber-security, improved to a staggering D in this year's report from the U.S. House of Representatives Committee on Government Oversight.
There were overall signs of optimism as a number of departments improved. At the head of the class were the DOJ, improving from D to A and HUD, going to A+ from D+, the prior year. Unfortunately, NASA scores went down (B- to D-) while Department of Education received an F.
These scores are predicated on agency compliance with the federal law known as the Federal Information Security Management Act of 2002 (FISMA). FISMA established a broad framework of requirements, related to establishing information security programs, security product certification and training.
In my opinion, FISMA isn't necessarily the best indicator of security compliance. I think that it has become a little unwieldy and ill defined when applied to security products certification. But it's certainly one indicator and the fact that some agencies have declined in their security score makes you wonder if they are taking it seriously enough.
Unfortunately, there is little consequence except the public embarrassment that accompanies a low score.
Posted by andreyee in
Odds and Ends
|
Digg This|
Add to del.icio.us
Trackback Pings
TrackBack URL for this entry:
http://www.ebizq.net/mt/mt-tb.cgi/1709

Andre Yee's Security Insider
