[Inamongst the blurb in this NSA charm-offensive are some glimpses of how low-grade NSA's internal security arrangements were.]
NSA installs new system controls in wake of Snowden leaks Tabassum Zakaria, Warren Strobel itNews Dec 15, 2013 10:51 PM (9 hours ago) http://www.itnews.com.au/News/367677,nsa-installs-new-system-controls-in-wake-of-snowden-leaks.aspx The US National Security Agency has made dozens of changes in its operations and computer networks to prevent the emergence of another Edward Snowden, including potential disciplinary action, a top NSA official said on Friday, as a White House review panel recommended restraints on NSA spying. ... "Any time you trust people, there is always a chance that someone will betray you," he said. The NSA is taking 41 specific technical measures to control data by tagging and tracking it, to supervise agency networks with controls on activity, and to increase oversight of individuals. Measures include requiring two-person control of every place where someone could access data and enhancing the security process that people go through and requiring more frequent screenings of systems administrative access, Ledgett said. ... The NSA's internal review has determined about 98 percent of the scope of the material that Snowden had accessed, and officials have found no evidence that he had help either within the NSA or from adversary spy agencies. Ledgett said that when Snowden was downloading the documents, NSA was ahead of other intelligence agencies in installing "insider threat" software that President Barack Obama ordered in the wake of an earlier leak scandal involving the group WikiLeaks. But installation of the software, which might have stopped Snowden, was not complete. "Snowden hit at a really opportune time. For him - not for us," he said. ... No one at the NSA has yet lost their job over the Snowden crisis, including at the Hawaii site where he worked. Ledgett said three people are under review for potential disciplinary action, but declined further comment. ... -- Roger Clarke http://www.rogerclarke.com/ Xamax Consultancy Pty Ltd 78 Sidaway St, Chapman ACT 2611 AUSTRALIA Tel: +61 2 6288 6916 http://about.me/roger.clarke mailto:[email protected] http://www.xamax.com.au/ Visiting Professor in the Faculty of Law University of N.S.W. Visiting Professor in Computer Science Australian National University _______________________________________________ Link mailing list [email protected] http://mailman.anu.edu.au/mailman/listinfo/link
