This looks like the DOD put yet another system in without testing it fully and let it loose on the public. If the government would follow their own rules, this should not be an issue. Since this is a DOD system, they need to follow the DOD Information Assurance Certification and Accreditation Program, or DIACAP for short. They did not, as part of DIACAP is a risk management process and vulnerability assessment.
In other words, nothing new. Film at 11.
Sent from my iPad using Tapatalk
|