DOE computer security found lacking

A report issued this month by the Inspector General of the Department of Energy (DOE) found that security at the DOE’s Counterintelligence Directorate (CN) was not up to par.

The investigation’s objective was to assess the internal controls on computer data at the CN, which is tasked to protect classified data and nuclear weapons against espionage by foreign entities. The investigation revealed that the CN had lost 20 computers, 14 of which held classified information, and the remaining 6 which may contain classified information. Several security protocols were overlooked in relation to the labeling of computers holding classified information.

Inspector General Gregory Friedman reports that "the inventory records were so imprecise and inaccurate that the Directorate had to resort to extraordinary means to locate an additional 125 computers."

The report concluded that the CN’s computers were not properly safeguarded against loss and theft.

The Inspector General’s recommendations include strengthening the internal controls, changing the reporting structure for lost computers, and labeling all computers with Unclassified, Confidential, Secret, or Top Secret.

Read the full report here (PDF).

Via UPI, TechWeb’s darkReading, Information Week

Tags: doe, cn, inspector general, data loss, data breach, department of energy, counterintelligence, government data, classified data