The federal government was the victim of more than 31,000 cybersecurity incidents in fiscal year 2018, according to an Office of Management and Budget report released Aug. 16.<\/p>\n\n\n\n
The annual report on cybersecurity, the FISMA FY 2018 Annual Report to Congress, found that the number of cyber incidents at agencies dropped 12 percent from last year. That figure is down from 35,000 incidents the previous year.<\/p>\n\n\n\n
The good news for federal government? This was the first year that agencies didn\u2019t have an incident that reached the \u201cmajor incident\u201d threshold set by OMB. That means no known breaches constituted a national security threat or released personally identifiable information.<\/p>\n\n\n\n
The federal government spent nearly $15 billion on cybersecurity in fiscal 2018. The Pentagon accounted for more than half of that spending. The Department of Homeland Security spent about $1.8 billion on cybersecurity.<\/p>\n\n\n\n
The report found that email-based threats remain \u201cprevalent” because of the high success rate of phishing attacks. Almost 7,000 attacks came through phishing. The report also found that the government was not able to identify <\/b>the way in which 27 percent agency systems were attacked.<\/p>\n\n\n\n
This trend \u201ccontinues to suggest that the government must take additional steps to help agencies identify the sources and vectors of these incidents,\u201d the report read.<\/p>\n\n\n\n
The most common attack was classified in the report as \u201cimproper usage\u201d with more than 9,600 incidents. Improper usage is defined as \u201cany incident resulting from violation of an organization\u2019s acceptable usage policies by an authorized user.\u201d<\/p>\n\n\n\n
OMB found five common security shortfalls across the federal agencies:<\/p>\n\n\n\n
* Lack of data protection,<\/p>\n\n\n\n
* Lack of network segmentation,<\/p>\n\n\n\n
* Inconsistent patch management,<\/p>\n\n\n\n
* Lack of strong authentication,<\/p>\n\n\n\n
* Lack of continuous monitoring,<\/p>\n\n\n\n
Several of these technologies are considered part of basic cybersecurity hygiene by cyber experts.<\/p>\n\n\n\n
DHS also provides agencies with a cybersecurity package to protect against cyberattacks. As of the end of September 2018, 70 agencies had implemented all of DHS\u2019s security offerings. This included the 23 agencies described in the Chief Financial Officers Act and the 102 civilian agencies evaluated.<\/p>\n","protected":false},"excerpt":{"rendered":"
The federal government was the victim of more than 31,000 cybersecurity incidents in fiscal year 2018, according to an Office of Management and Budget report released Aug. 16.<\/p>\n","protected":false},"author":7,"featured_media":45797,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":14,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"9":{"categories":["cyber"],"primary_category":"cyber"}}},"categories":[106,31,110,14,33],"tags":[],"coauthors":[3242],"class_list":["post-14684","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-home","category-it-cloud-report","category-it-networks","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"I3ESZ2UTPBCRTMMK7FJNRPXPAM","arc_canonical_url":"\/it-networks\/2019\/08\/16\/feds-never-faced-a-major-cybersecurity-attack-in-2018\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n