A survey this spring of 1,800 federal information security professionals revealed that the government’s security posture hasn’t improved over the past two years. So, what should the U.S. government do to tackle this problem head on?
For instance, the National Cybersecurity Center of Excellence released a guide for controlling user access to systems based not on role or job title but on user attributes, such as certifications, IP address, group, employee status, etc. This will make it easier for IT departments to terminate network access instantly for the thousands of employees who leave the payrolls every year.
Read more at: GCN