Tasmanian Audit Office reveals 'excessive' online attack risks

[InfoSec News <alerts () infosecnews org>]

http://www.zdnet.com/article/tasmanian-audit-office-reveals-excessive-online-attack-risks/

By Leon Spencer
Security
ZDNet News
March 27, 2015

A report from the Tasmanian Audit Office released on Thursday has revealed 
that at least five state government departments were open to excessive 
risk from online attacks.

The Tasmanian auditor-general's report (PDF) No. 8 of 2014-15, Security of 
information and communications technology (ICT) infrastructure, outlines a 
number of weaknesses in the audited departments' digital security.

The audit was conducted on five of the state government's departments, 
including Treasury; the Department of Primary Industries, Parks, Water and 
the Environment; the Department of Health and Human Services; the 
Department of Premier and Cabinet; and the Department of Police and 
Emergency Management.

The Audit Office found that although information was generally safe and 
secure with reasonable backup and access restrictions, all of the audited 
departments were at excessive risk from online attacks, due to a lack of 
Australian Signals Directorate-recommended mitigation strategies.

[...]



--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/