• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • News
  • Topics
    • Common Sense
    • Congress
    • Debt
    • Government waste
    • Millenials
    • QuizCap
    • Taxes
  • Tools
    • Agencies
    • Memes That Matter
    • Research Library
    • Scavenger Hunt
  • Shop
  • What We’re About
  • Multimedia
  • What We’re About
  • Contact Us
  • Newsletter signup
  • Give to the Cause

TREASURY OIG: BEP’s Network and Systems Security Was Found to Be Insufficient

September 1, 2011

Pursuit's Take

OIG determined that BEP did not establish sufficient protection for its network and systems and should enhance its security controls to protect against threats posed by malicious insiders. Specifically, during our social engineering exercise, we successfully persuaded 23 BEP users to give us access to their computers (100 percent of those attempted) using their accounts. While impersonating BEP contractors with unescorted access to the facility, every user whom we approached gave us full access to their computer without challenge.

OIG also identified significant deficiencies in BEP’s network and systems related to its patch management processes and system configurations. By taking advantage of these vulnerabilities, OIG was able to gain full access to the desktop, where OIG was able to create, edit, delete, and move files. OIG was also able to access files and databases on the server.

Read the full report Artboard 1

sidebar

sidebar-alt

Support Our Work

Federal agencies go largely unchecked, spending at will making use of inflated budgets. While some do very important work, we need to hold them accountable. You can do this by donating, emailing your legislator, or signing our petitions.

Donate Now

Sign Up for Pursuit Updates

Privacy Policy

Powered by the Foundation to Restore Accountability

Search
UNCOVER SOME GOVERNMENT WASTE?
share your opinion

Can you believe the US Government spends more money on it’s cable bill than on disaster relief?

NO! I’M FURIOUS! Eh, sounds right