DHS Maintains Effective Intel Management System
IG: Procedures Well Documented, Security Controls Adequate The Department of Homeland Security maintains an effective, enterprise-wide information security management program for its intelligence systems, according to an unclassified summary of a DHS inspector general audit released Tuesday.For the most part, the summary states, IT security procedures have been documented, and adequate security controls have been employed.
"Nonetheless," the report says, "management oversight and operational issues remain regarding the effectiveness of the program. Concerns with the plan of action and milestones process and the implementation of a formal information system security training and awareness program for intelligence personnel still exist.
"Further, the Intelligence and Analysis office, having become responsible for the U.S. Coast Guard intelligence systems reporting, has not provided a current authority to operate to the U.S. Coast Guard for its Coast Guard Intelligence Support System.
"Additionally, the Intelligence and Analysis office should continue to provide management oversight to ensure that the U.S. Coast Guard maintains an effective information technology security program and complies with the Federal Information Security Management Act and Department of Homeland Security requirements."
