In an effort to beef up the security of government systems, the U.S. Office of Management and Budget announced last month that 18 agencies must comply with federal IT-security standards before they receive funding for upgrades. Exempt from this requirement are agencies that have demonstrated sound security practices by testing their procedures.

The OMB recommends that the underperformers fix their cybersecurity problems by using funds originally intended for development, modernization and enhancement--$8.5 billion this year and $8.1 billion requested for fiscal 2005. But how can these agencies meet the standards without first developing, modernizing or enhancing their IT systems? And where will they get the money for testing and maintenance?

By John Vacca at NWC.

[ Read more ]

Related items

• Article: Interview with John Vacca, information technology consultant and internationally known author (9 September 2003)