4 ms·

Is it reasonable to expect every department, organization, and agency to have flawless security? Not necessarily blocking based on IPs, but requiring VPNs to a

• Someone1234 12y ago
  > Is it reasonable to expect every department, organization, and agency to have flawless security? No. But it is no more reasonable to assume that a single department or organisation would have a remit to secure every computer system of the US government. > Not necessarily blocking based on IPs, but requiring VPNs to access these networks, which would be a requirement for another level of authentication and another point of monitoring who accesses the systems. You mean employees require a VPN to access these systems or the "bad guys?" VPN access for internal networks is fairly standard already. A handful of these kind of incidents originate when an employee infects their machine with malware which then "calls home" and gives others a backdoor way into the network (which can then be sold on or utilised).