{"id":3436,"date":"2016-11-17T21:54:51","date_gmt":"2016-11-17T21:54:51","guid":{"rendered":"http:\/\/www.theblackvault.com\/documentarchive\/?p=3436"},"modified":"2016-11-17T21:54:51","modified_gmt":"2016-11-17T21:54:51","slug":"usps-investigation-south-florida-district-vulnerability-assessment-audit-report-october-22-2013","status":"publish","type":"post","link":"https:\/\/www.theblackvault.com\/documentarchive\/usps-investigation-south-florida-district-vulnerability-assessment-audit-report-october-22-2013\/","title":{"rendered":"USPS Investigation: South Florida District Vulnerability Assessment Audit Report, October 22, 2013"},"content":{"rendered":"

Background<\/h3>\n

The U.S. Postal Service Office of Inspector General’s risk modeling identified the South Florida District as the _________\u00a0based on collected data showing malicious software programs on district computer systems. These security incidents can damage information system hardware and software and affect the integrity, confidentiality, and availability of data.<\/p>\n

The South Florida District serves more than 14 million customers, delivers mail to more than 3.1. million homes, and generates annual revenue of about
\n$1.1 billion. Districts are responsible for adhering to. U.S. Postal Service policies for maintaining and securing their information systems. The (b)(3) 39 usc 410
\nService Center is responsible or updating all South Florida District information systems, including installing security dates. Engineering personnel in ______\u00a0manage the applications supporting the mail processing environment in the district.<\/p>\n

What the OIG Found<\/h3>\n

Security controls in the South Florida District did not adequately protect Postal Service data and infrastructure against potential corruption and unauthorized\u00a0access. Of ___ Internet addresses that operated as servers, databases, and workstations at three mail processing plants, we found significant security control weaknesses on ___ of them. Administrators did not consistently install security updates (patches) and configure all operating systems and
\ndatabases as required by policy.<\/p>\n

What the OIG Recommended<\/h3>\n

We recommended management implement vendor recommendations for patching and Postal Service configuration standards, correctly configure the\u00a0_________\u00a0and ensure personnel with access to Postal Service resources receive annual security awareness training.<\/p>\n

The Report<\/h3>\n

The following document was received under the USPS\/IG FOIA Case\u00a02017-IGFP-00029.<\/p>\n

\u00a0Report Number IT-AR-14-001- South Florida District Vulnerability Assessment Audit Report – dated October 22, 2013<\/a>\u00a0[29 Pages, 5.3MB]<\/p>\n

https:\/\/documents.theblackvault.com\/documents\/ig\/IT-AR-14-001.pdf<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Background The U.S. Postal Service Office of Inspector General’s risk modeling identified the South Florida District as the _________\u00a0based on collected data showing malicious software programs on district computer systems. These security incidents can damage information system hardware and software and affect the integrity, confidentiality, and availability of data. The South Florida District serves more<\/p>\n","protected":false},"author":1,"featured_media":3437,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"episode_type":"","audio_file":"","transcript_file":"","podmotor_file_id":"","podmotor_episode_id":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","filesize_raw":"","date_recorded":"","explicit":"","block":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[2],"tags":[212,170,919],"class_list":["post-3436","post","type-post","status-publish","format-standard","has-post-thumbnail","category-government","tag-ig","tag-inspector-general","tag-united-states-posal-service"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t