More questions raised about OPM’s response to hack of background, personnel records database

[Bill USA]

[font size="+1"]... your consummately safe government computer systems at work...LOL![/font]



https://www.washingtonpost.com/news/powerpost/wp/2016/05/26/more-questions-raised-about-opms-response-to-breaches-of-background-personnel-records/

A year after the government disclosed that personal information about millions of current and former federal employees and others had been stolen from two Office of Personnel Management databases, auditors remain skeptical of OPM’s steps to shut the cyber barn door.

“We continue to believe that there is a very high risk that the project will fail to meet its stated objectives of delivering a more secure environment at a lower cost,” the office of the agency’s inspector general said in a report issued Thursday.

The report is the latest in a series from the office criticizing OPM management for not carrying out standard planning steps for such a project, including exploring all the options first and fully understanding the project’s scope, its cost and how it will be funded.

The first of those reports shortly followed OPM’s acknowledgement of breaches of separate databases of federal employee personnel records and of background investigation records.

The former breach involved records of some 4.2 million current and former federal employees, including personal identifying information, educational background, work histories and similar information. The latter involved some 21.5 million current and former federal, military and contract personnel and others who had background investigations performed on them since 2000 and in some cases before. Those checks are performed for reasons including security clearance applications, which require disclosure of highly personal information such as financial or legal troubles, or to gain permission to enter certain government buildings.
(more)

[elehhhhna]

1. Opm is outsourced to a contractor. Just like HILs SOS email server!

[Bill USA]

3. Oh, I thought HRC's system was totally different from the rest of Government systems, so the meme

goes, a completely home-brewed set-up, thus "far less safe and secure" (one word often heard in describing HRC's use of her own system was "reckless&quot than all the rest of Government systems???

No evidence of hack in Hillary Clinton's email

The IT specialist who set up Hillary Clinton's private email server has turned over security logs to the FBI that show no evidence of any foreign hacks into Clinton's email, a source close to the investigation confirmed to CBS News.

[KT2000]

2. OPM outsources a lot of work

which may promote lack of responsibility. Everyone is watching the bottom line when they should be ever more watchful of quality and security. My guess is that is beyond the capabilities of most government agencies and businesses.

Managers are dogging the outsourcers for cheaper not safer.

[elehhhhna]

4. bill Clinton outsourced to carlyle group

[KT2000]

5. my friend worked in personnel

in the government. Her department was outsourced to Northrup Grummon - a lovely defense contractor in charge of personnel files. She had to go there for "training" and ended up walking out, with others, because the trainer did not know anything.