3 ms·
Defense Data Breaches: Pentagon Must Hold Contractors Accountable
- i_am_proteus 8y agoThe Pentagon should move away from giving contractors checklists to complete and start actively pentesting them before clearing them to do work. "Security through bureaucracy" does not work.
- toomuchtodo 8y agoThis would help, but findings and audit reports aren’t enough. You need to revoke clearances for pen testing findings that aren’t resolved in a timely manner, or repeated failings. I would also like to see claw backs and penalties for data leakage considering the sensitive nature of the data. You get what you measure, incentives matter, and all those cliches.
- deleted 8y ago[deleted]