National: A new government watchdog report highlights urgent federal cybersecurity risks | Tonya Riley/The Washington Post
Government agencies could have caught a massive Russian hacking campaign sooner if they had implemented urgent cybersecurity recommendations from the federal government’s top watchdog. That’s the message the Government Accountability Office gave the House’s top oversight committee yesterday following the release of its biennial report listing government programs at highest risk of mismanagement and abuse. “It certainly would have led to an earlier discovery of the attack,” U.S. Comptroller General Eugene L. Dodaro told House Oversight and Reform Committee Chair Carolyn B. Maloney (D-N.Y.) when asked about the GAO findings. “It’s hard to say … but we would have been better postured to detect the attack ourselves and to take quicker action,” he said, referring to the fact the campaign was uncovered by private cybersecurity firm FireEye months after Russian hackers accessed government systems. The GAO report provides an early blueprint for how Congress and federal agencies can work to address the significant cybersecurity issues raised by the hack of SolarWinds software, which led to the compromise of at least nine federal agencies. “[A]nother silent battle is being fought in our IT networks by cyber attackers intent on stealing our intellectual property and undermining our national security,” Maloney said during her opening statement. “The SolarWinds breach that came to light last December, as well as escalating and targeted cyberattacks that have drained millions of dollars from struggling hospitals, are just two examples of the threats we know about.”
Full Article: The Cybersecurity 202: A new government watchdog report highlights urgent federal cybersecurity risks – The Washington Post