Resources for Federal Information Security Management Act (FISMA)

Cyberye: Security through compliance?

www.gcn.com

DURING THE LAST YEAR OR SO, a raft of reports from the Government Accountability Office has detailed the shortcomings of federal information security. Weaknesses in security policies and practices have exposed sensitive data, and an Internet threat report from Symantec found that one-fourth of personal data breaches in the first six months of 2007 occurred in the government sector.

“What has really changed for 2008? Not a whole lot,” said Jim Russell, Symantec’s public sector vice president.

The problem, as he sees it, is piecemeal implementation of best practices for securing information in an enterprise. The tools and knowledge to do the job exist, but despite legislation and mandates requiring a basic level of security controls, they are not being routinely applied.

View the Resource

Share or bookmarklet this web page at: