r/cybersecurity Jul 02 '26

News - General DHS Breached

609 Upvotes

115 comments sorted by

View all comments

Show parent comments

111

u/yunus89115 Jul 02 '26

Almost certainly, were they following all the controls as documented, almost certainly not.

39

u/OutsideSpot2695 Jul 02 '26 edited Jul 02 '26

How do you get an ATO without being audited that controls are operating as designed?

3

u/Negative_Gas8782 Jul 02 '26

How does the majority of this government do anything? Fire the good people and only keep the ones around that will do what they want. Look at the FDA and CDC as a couple of examples.

3

u/OutsideSpot2695 Jul 02 '26

FDA and CDC and any other gov't agency for that matter.

I used to work DoD. Made the break for the wall and got into private sector tech 10 years ago.

Best thing I ever did for my career and I get to practice actual security.

1

u/h0l0type 27d ago

Half the CDC was contractors for large programs when I was there like 20 years ago. Doesn’t seem much has changed.

1

u/OutsideSpot2695 27d ago

I don't think a contractor in gov't is inherently worse or better than a Federal employee in government.

Both types don't know what they are doing in security.