DOD Controls Over Information Placed on Publicly Accessible Web Sites Require Better Execution
Abstract
In a September 25, 2008, memorandum to the DOD Office of the Inspector General, the then Deputy Secretary of Defense (DEPSECDEF), outlined his concerns that, "sensitive information frequently can still be found on publicly accessible Web sites." To address these concerns, the then DEPSECDEF requested the Inspector General to include this matter when executing his oversight responsibility. As a result, the DOD Office of the Inspector General announced an audit of controls over information contained on DOD publicly accessible Web sites. The overall objective was to determine whether DOD Components are in compliance with Web site security policy. Specifically, we determined whether DOD Components have controls and processes in place to ensure review and approval of all information posted to publicly accessible Web sites before posting. We also determined whether personnel responsible for review of information for Web posting have received Web operations security (OPSEC) training. See Appendix A for a discussion of the scope and methodology and prior audit coverage.
Document Details
- Document Type
- Technical Report
- Publication Date
- Nov 29, 2010
- Accession Number
- ADA546722
Entities
Organizations
- Office of the Inspector General, U.S. Department of Defense