While Commerce was able to spot the attack and put a stop to it, other agencies weren't so lucky. Hackers vandalized Web sites at the Army, FBI, NASA, Navy, Senate and the White House. Many other intrusions weren't made public. With their systems under siege, information technology managers are frustrated and pleading for money. But buying new technology may not be the only answer.
Good security begins with policy and management.
Without proper security policies, staff buy-in and training, the best software in the world will get you nowhere. Creating Security Policy Jack Brock, director of the Government-wide and Defense Information Systems unit of the General Accounting Office, told Senators in October that agencies should conduct a risk assessment before creating any security policy. Roger Baker, Commerce Department chief information officer and co-chair of the Chief Information Officers Council's Security, Privacy and Critical Infrastructure Committee, agrees. You've got to be aware of what you have to protect. Commerce's security needs are significantly different than those of the Internal Revenue Service or the Social Security Administration.