The opinions expressed by columnists are their own and do not represent our advertisers
Wednesday, July 22, 2015
OPM to agencies: Pay for data breach protection services
Acting OPM Director Beth Cobert sent an email to agencies telling them about OPM’s plans to raise its fees for security clearance services it provides in order to recoup the costs of the identity protection services it must purchase for the victims of the attack.
The agencies of the federal government charge each other for services rendered.....this is simply another way to take each other's budgets.
They should be determining which controls failed (and why/how) to allow the breach in the first place! If an Authorizing Official accepted a risk - that's the one that should be encouraged to "be successful" elsewhere. If the risk wasn't found, documented and acknowledged during their last audit/assessment - maybe they cheap government only paid for a check-box audit instead of a risk-based assessment...or the audit team needs to be replaced.....
Meanwhile, as an IT Auditor and IT Security Professional, looks like opportunities for employment growth!
4 comments:
A day late and a dollar short.
In other words, the consumer has to pay for the incompetence of the seller.
I get it...
I'm going to have to charge double for replacement windows because I'm clumsy and keep breaking them all the time.
I thought this was a joke when I first read the headline.
The agencies of the federal government charge each other for services rendered.....this is simply another way to take each other's budgets.
They should be determining which controls failed (and why/how) to allow the breach in the first place! If an Authorizing Official accepted a risk - that's the one that should be encouraged to "be successful" elsewhere. If the risk wasn't found, documented and acknowledged during their last audit/assessment - maybe they cheap government only paid for a check-box audit instead of a risk-based assessment...or the audit team needs to be replaced.....
Meanwhile, as an IT Auditor and IT Security Professional, looks like opportunities for employment growth!
Post a Comment