The recent breach at the U.S. Department of Energy came weeks after two reports from the department’s inspector general which detected vulnerabilities, FCW reports. The inspector general wrote the department “had not developed and deployed an effective and/or efficient enterprise-wide cybersecurity incident management program” and had not always “appropriately reported successful incidents such as infection by malicious code and potential disclosure of personally identifiable information.” Meanwhile, Public Service reports on ways UK organizations can defend against breaches as the number reported steadily climbs, and Mathew Schwartz opines in InformationWeek that the U.S. Congress must overhaul existing privacy and computer-abuse laws.
Full Story