IT Security Report Card Gets Low Grade From Critics

摘要

The U.S. government received an overall C grade on an annual information-security report card that was released last week. But there is growing skepticism about whether the report card and the internal security reports on which it's based accurately portray how well prepared federal agencies are to deal with IT security threats. Nine of the 24 agencies rated by Rep. Tom Davis (R-Va.) were given failing security grades for 2007 on the new report card, while eight got grades of A- or better. The grades are based on reports of agencies' compliance with the Federal Information Security Management Act. Those reports are compiled annually by the inspector general at each agency.