Cybersecurity officials turn tables on congressional graders

[The Straight Story]

Cybersecurity officials turn tables on congressional graders
By Daniel Pulliam
[e-mail]



Federal computer security executives, who have been given an overall grade of D+ from a congressional committee for their efforts to secure information technology systems, have returned the favor with tough grades of their own for the rating process.


Each year, the House Government Reform Committee issues grades on agencies' compliance with the 2002 Federal Information Security Management Act. The grades are based on information reported by each agency and federal inspectors general to Congress and the Office of Management and Budget.


The 2004 grades found some improvement from 2003, but seven agencies, including the departments of Homeland Security and Energy, received Fs.


A survey of a quarter of agencies' chief information security officers conducted by Telos Corp. found that 36 percent gave the congressional grading process a C, and that a large majority do not believe there is any relationship between the cybersecurity report card and security funding. Another 23 percent of CISOs gave the report card a B. Fourteen percent of cybersecurity chiefs gave the reports card either an A or F.

http://www.govexec.com/dailyfed/0405/041505p1.htm