Online testing firm agrees to security audit after inquiry from senator
It’s another case of privacy and security risks emerging in technology that is key to adapting to the coronavirus pandemic.
Advertisement
security audit
The Interior Department OIG clearly had some fun hacking the agency’s Wi-Fi networks
The report by the Office of the Inspector General underscores how a tech-savvy team can expose and help fix gaping security holes.
Improve controls on classified information, inspector general tells U.S. intelligence community
The IC has to ramp up how it manages and mitigates "the risk that a trusted privileged user could inappropriately access, modify, destroy, or exfiltrate classified data,”…
How to demonstrate trust in cybersecurity practices with organization leaders
A new report advises CISOs to measure their security investments and identify critical weaknesses by conducting continuous penetration testing.
As threats increase, audit finds federal agencies struggle to implement cyber plans
“Until agencies more effectively implement the government’s approach and strategy, federal systems will remain at risk,” GAO warned.
Symantec’s stock plummets after announcement of internal audit
Symantec is conducting an investigation over “concerns raised by a former employee.”
Advertisement
Watchdog group calls on HHS to improve cyber defenses
The Department of Health and Human Service's Office of Inspector General said that a penetration test on four operating divisions identified "configuration management and access control vulnerabilities."
Auditors get guidance on SSH key management
A new guide for auditors says SSH key management should be on their checklist because the proliferation of unmanaged keys for the ubiquitous encryption protocol means IT…
Sizing up risk management: Accountants issue guide for cyber audits
The largest professional organizations for qualified accountants issued guidance to its members this week about how to audit management claims about their company's cybersecurity.
Tech workers are routinely pressured to roll out products that aren’t secure, report says
What happens to projects that set aside security in favor of speed?