3 ms·
The US DoD does have 2-factor authentication. Every user (every employee of the DoD, as well as contractors) has a CAC (Common Access Card) that they need to lo
by DKnoll 8y ago
The US DoD does have 2-factor authentication. Every user (every employee of the DoD, as well as contractors) has a CAC (Common Access Card) that they need to log into a computer, along with a PIN. It seems in these 3 facilities that were audited the administrators (probably outside contractors from my understanding of IT in DoD facilities) failed to follow DoDs own guidelines (STIGs).
EDIT: as an aside, the DoD STIGs can be fairly interesting and are very useful references for sysadmins. Check it out - https://iase.disa.mil/stigs/Pages/index.aspx https://iase.disa.mil/stigs/Pages/index.aspx
- badrabbit 8y agoThanks a lot,didn't know about STIGs. I knew they used smart cards for pentagon and DoD but wasn't sure if that covered the rest of the secure and classified federal networks. Even then, it looks to me like they're excellent at policy making and paperwork but they're not innovating new solutions or solutions customized to their needs. For example, fb runs whitebox network gear,guaranteed that won't happen at DoD. In Infosec I think agility and adoptability is very important.