Because when I think of technical sophistication, I think of DHS.
Re:The OPM Data Breach [pdf]
by BoringCode on Thursday September 08, 2016 @08:30PM
(#12458770)
Exactly, they simply have never had the institutional knowledge required to secure government networks.
Re:The OPM Data Breach [pdf]
by linkregister on Friday September 09, 2016 @01:22PM
(#12464258)
Their hostile attitude towards computer security pay incentives practically guarantees nobody will jump ship from IOC or TAO. This problem will likely only be resolved by a big media stink.
Re:The OPM Data Breach [pdf]
by Godel_unicode on Friday September 09, 2016 @01:11AM
(#12459760)
> Without stronger action from Congress, this may never change.
You should go read the cybersecurity act passed in December of 2015, and realize that DHS is now authorized to force agencies to use it's security and offerings.
That's indeed the problem. There was a strong push for a while to put NSA in charge of civilian infosec infrastructure. But Congress didn't really want to put a combat support agency in that role. So DHS is technically in charge of that. But we still have the majority of federal agencies stuck fending for themselves when it comes to securing their networks. Without stronger action from Congress, this may never change.