[LINK] itNews: 'NSA installs new system controls ...'

[Roger Clarke]

[Inamongst the blurb in this NSA charm-offensive are some glimpses of 
how low-grade NSA's internal security arrangements were.]


NSA installs new system controls in wake of Snowden leaks
Tabassum Zakaria, Warren Strobel
itNews
Dec 15, 2013 10:51 PM (9 hours ago)
http://www.itnews.com.au/News/367677,nsa-installs-new-system-controls-in-wake-of-snowden-leaks.aspx

The US National Security Agency has made dozens of changes in its 
operations and computer networks to prevent the emergence of another 
Edward Snowden, including potential disciplinary action, a top NSA 
official said on Friday, as a White House review panel recommended 
restraints on NSA spying.
...
"Any time you trust people, there is always a chance that someone 
will betray you," he said.

The NSA is taking 41 specific technical measures to control data by 
tagging and tracking it, to supervise agency networks with controls 
on activity, and to increase oversight of individuals.

Measures include requiring two-person control of every place where 
someone could access data and enhancing the security process that 
people go through and requiring more frequent screenings of systems 
administrative access, Ledgett said.
...
The NSA's internal review has determined about 98 percent of the 
scope of the material that Snowden had accessed, and officials have 
found no evidence that he had help either within the NSA or from 
adversary spy agencies.

Ledgett said that when Snowden was downloading the documents, NSA was 
ahead of other intelligence agencies in installing "insider threat" 
software that President Barack Obama ordered in the wake of an 
earlier leak scandal involving the group WikiLeaks. But installation 
of the software, which might have stopped Snowden, was not complete.

"Snowden hit at a really opportune time. For him - not for us," he said.
...
No one at the NSA has yet lost their job over the Snowden crisis, 
including at the Hawaii site where he worked. Ledgett said three 
people are under review for potential disciplinary action, but 
declined further comment.
...

-- 
Roger Clarke                                 http://www.rogerclarke.com/
			            
Xamax Consultancy Pty Ltd      78 Sidaway St, Chapman ACT 2611 AUSTRALIA
Tel: +61 2 6288 6916                        http://about.me/roger.clarke
mailto:Roger.Clarke at xamax.com.au                http://www.xamax.com.au/

Visiting Professor in the Faculty of Law            University of N.S.W.
Visiting Professor in Computer Science    Australian National University