A recent report from the Office of the Inspector General found that the U.S. Department of the Interior Office of the Chief Information Officer has failed to follow the National Institute of Standards and Technology for incident detection and response, SC Media reports. The report found OCIO’s decentralized operation to be directly against established NIST practices. Furthermore, the report stated, “The OCIO did not establish the foundation necessary for a mature incident response program — it did not determine objectives, define responsibilities, or manage the incident response program from an enterprise level.” As such, the report includes 23 recommendations for the OCIO that would improve its ability to detect and rectify future cyber issues.
Full Story