Naval Reactors Program lacks ‘fully effective’ cybersecurity program

Apr 22

Auditors say the Naval Reactors Program within the National Nuclear Security Administration continues to lack a “fully effective cybersecurity program.”

In an April 12 report (.pdf), the Energy Department office of inspector finds much to laud–noting that recent vulnerability scans turned up just 335 high- and medium-risk vulnerabilities, as opposed to a July 2011 scan that turned up about 9,000 such vulnerabilities.

And, “to its credit, Naval Reactors had taken action to remediate the vast majority of the identified vulnerabilities,” auditors also say.

Read Complete Article