Call us now:
The U.S Governments Accountability Office (GAO) audit of the State Departments cyber posture and maturity does not paint a particularly rosy picture of its cybersecurity implementation, and Federal regulatory compliance.
It is easy to be critical about the challenges the state department faces with governance, accountability, responsibility and delivery of its cyber program. At a time when, like all Federal Agencies, governance, accountability, responsibility and delivery should have been sorted out after 20 years. However one cannot think of a circumstance where the private sector could get away with non-compliance after 20 years.
The GAO assessment is focused on FISMA compliance. Therefore the report is not unusual in its identification of cyber risk management governance, oversight, assurance and delivery failure. All federal agencies are required to adopt FISMA and subsequently NIST SP 800-39, 800-37 and a cyber standard such as NIST SP 800-53 or a CSF profile.
The statement ‘But State hasn’t fully implemented its cybersecurity risk program.’ AKA FISMA. Page 3 of the report is telling.
Full report: (https://lnkd.in/eVTRVYBv)
FISMA can never be fully implemented. But it seems that the basics have not yet been achieved, at a time when digital is running way in advance of cybersecurity.
Ted Dziekanowski Brian D. McCarthy Bob Dix Rachel V. Rose, JD, MBA
#cybersecurity #cyberriskmanagement #gao #statedepartment
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7118493549817409537