Wednesday, October 17, 2012

VA OIG: Review of Alleged Incomplete Installation of Encryption ...

Editor?s Note:? The Department of Veterans Affairs OIG report is attached here.

From: VA Office of Inspector General

Why We Did This Audit

OIG received a hotline allegation that the Office of Information Technology (OIT) had not installed and activated all of the 300,000 Guardian Edge encryption software licenses purchased in 2006 at a cost of about $3.7 million.

What We Found

We substantiated the allegation and found that OIT had not installed and activated an additional 100,000 licenses purchased in 2011. As of July 2012, OIT officials stated they had installed and activated only a small portion, about 65,000 (16 percent), of the total 400,000 licenses procured.

OIT did not install and activate all of the licenses due to inadequate planning and management of the project. Specifically, OIT did not allow time to test the software to ensure compatibility with VA computers, ensure sufficient human resources were available to install the encryption software on VA computers, and adequately monitor the project to ensure encryption of all VA laptop and desktop computers.

As such, 335,000 (84 percent) of the total 400,000 licenses procured, totaling about $5.1 million in questioned costs, remain unused as of 2012. Given changes in VA technology since 2006, the Department lacks assurance the remaining software licenses are compatible to meet encryption needs in the current computer environment. Further, because OIT has not installed all 400,000 encryption software licenses on VA laptop and desktop computers, veterans? personally identifiable information remains at risk of inadvertent or fraudulent access or use.

Source: http://www.thecre.com/fisma/?p=3463

andrew bynum the time machine michelin tires michelin tires rett syndrome where the wild things are josh smith

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.