4 ms·
> Why doesn't the federal government just have a big database? Because that tends to end very badly. I've been in Fed MIS systems since I joined the USAF in 1
by vogelke 9y ago
> Why doesn't the federal government just have a big database?
Because that tends to end very badly. I've been in Fed MIS systems since I joined the USAF in 1981, and it's the same just about everywhere except for a few of the research labs.
Remember the OPM data breach, where the background check info for over 20 million people went walkabout? I was one of the lucky winners, and it's a result of the management-by-spreadsheet mentality that's everywhere in the government.
On paper, they were fine. In actual fact, not so much.
If the security checklist says "you must have an audit system in place", and you have the system installed and running, you pass. Nothing is said about ever looking through the logs for atypical behavior that might indicate a breach.
You want to buy new software? If it's not Oracle or Microsoft, good luck. If there's not a contractual vehicle in place to use for the purchase, forget it. Whether or not the software is fit for purpose has no bearing on the matter.