Audit finds holes in cyber defenses of state agencies

  • By Jerry Cornfield
  • Monday, December 15, 2014 4:35pm
  • Local News

The state Auditor’s Office revealed Monday that professional hackers breached security defenses of state agencies several times earlier this year and put loads of sensitive data potentially at risk.

Fortunately, Auditor Troy Kelley ordered the cyber attacks and taxpayers financed them. And, most importantly nothing was lost.

It was all done as part of a $1.1 million performance audit of the state’s information technology (IT) security system. The audit focused on how well five state agencies secured data, protected their respective network, controlled access to the data and managed operations.

Auditors found 347 instances where agencies were not in full compliance with current state security standards; the majority involved a lack of documentation.

However, IOActive, a Seattle firm hired to test the security of applications and the vulnerability to cyber attack, found “weaknesses at all five agencies,” according to the report.

Auditors recorded 46 issues, seven of which auditors deemed a “critical” risk described as carrying the potential of “extreme impact to entire entity and almost certain to be exploited.”

Another 12 were found to be of “high” risk, meaning they could be exploited by an attacker with minimal skills and 11 others considered to be of “medium” risk in which an “expert attacker could exploit with minimal difficulty.

The audit did not identify the agencies nor did the findings detail where the weaknesses were detected out of concern that hackers could use the information to attack the state.

All of the agencies have either fixed, or are working to working to fix the issues, according to the audit.

Recommendations include requiring the agencies to cure the weaknesses exposed during the audit. It also suggests the state’s chief information officer revise the state’s security standards to align more closely with national standards .

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Boeing firefighters union members and supporters hold an informational picket at Airport Road and Kasch Park Road on Monday, April 29, 2024 in Everett, Washington. (Annie Barker / The Herald)
Biden weighs in on Boeing lockout of firefighters in Everett, elsewhere

On Thursday, the president expressed support for the firefighters, saying he was “concerned” Boeing had locked them out over the weekend.

Everett officer Curtis Bafus answers an elderly woman’s phone. (Screen shot from @dawid.outdoor's TikTok video)
Everett officer catches phone scammer in the act, goes viral on TikTok

Everett Police Chief John DeRousse said it was unclear when the video with 1.5 million views was taken, saying it could be “years old.”

Construction occurs at 16104 Cascadian Way in Bothell, Washington on Tuesday, May 7, 2024. (Annie Barker / The Herald)
What Snohomish County ZIP codes have seen biggest jumps in home value?

Mill Creek, for one. As interest rates remain high and supplies are low, buyers could have trouble in today’s housing market.

A person takes photos of the aurora borealis from their deck near Howarth Park on Friday, May 10, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
Snohomish County residents marvel at dazzling views of northern lights

Chances are good that the aurora borealis could return for a repeat performance Saturday night.

Arlington
Motorcyclist dies, another injured in two-vehicle crash in Arlington

Detectives closed a section of 252nd St NE during the investigation Friday.

Convicted sex offender Michell Gaff is escorted into court. This photo originally appeared in The Everett Daily Herald on Aug. 15, 2000. (Justin Best / The Herald file)
The many faces of Mitchell Gaff, suspect in 1984 Everett cold case

After an unfathomable spree of sexual violence, court papers reveal Gaff’s efforts to leave those horrors behind him, in his own words.

Retired Snohomish County Superior Court Judge Anita Farris smiles as she speaks to a large crowd during the swearing-in of her replacement on the bench, Judge Whitney M. Rivera, on Thursday, May 9, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
One of state’s most senior judges retires from Snohomish County bench

“When I was interviewed, it was like, ‘Do you think you can work up here with all the men?’” Judge Anita Farris recalled.

A truck drives west along Casino Road past a new speed camera set up near Horizon Elementary on Wednesday, May 8, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
After traffic cameras went in, Everett saw 70% decrease in speeding

Everett sent out over 2,000 warnings from speed cameras near Horizon Elementary in a month. Fittingly, more cameras are on the horizon.

The Monroe Correctional Complex on Friday, June 4, 2021 in Monroe, Wash. (Olivia Vanni / The Herald)
Trans inmate says Monroe prison staff retaliated over safety concerns

Jennifer Jaylee, 48, claims after she reported her fears, she was falsely accused of a crime, then transferred to Eastern Washington.

Inside John Wightman’s room at Providence Regional Medical Center on Wednesday, April 17, 2024 in Everett Washington. (Annie Barker / The Herald)
In Everett hospital limbo: ‘You’re left in the dark, unless you scream’

John Wightman wants to walk again. Rehab facilities denied him. On any given day at Providence, up to 100 people are stuck in hospital beds.

Firefighters extinguish an apartment fire off Edmonds Way on Thursday May 9, 2024. (Photo provided by South County Fire)
7 displaced in Edmonds Way apartment fire

A cause of the fire had not been determined as of Friday morning, fire officials said.

Biologist Kyle Legare measures a salmon on a PUD smolt trap near Sportsman Park in Sultan, Washington on May 6, 2024. (Annie Barker / The Herald)
Low Chinook runs endanger prime fishing rivers in Snohomish County

Even in pristine salmon habitat like the Sultan, Chinook numbers are down. Warm water and extreme weather are potential factors.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.