Adrian Johnson
TLDR:
- Federal networks with a single vendor may be at risk of cyberattacks
- Tabletop exercise showed that agencies with diverse IT environments are better protected
In a recent article by Federal News Network, the debate over whether government IT systems should be run by a single vendor or have a diverse set of vendors was discussed. The Center for Cybersecurity Policy and Law conducted a tabletop exercise to simulate an attack on two fictional U.S. agencies with varying degrees of IT concentration and diversity. The exercise revealed that agencies with more diversified technology were better equipped to fend off attackers compared to agencies with a high amount of technology from one vendor.
The Center for Cybersecurity Policy and Law provided recommendations for the National Institute of Standards and Technology (NIST) to define IT monoculture, and for government agencies to investigate and oversee the risk of IT consolidation. Overall, the study showed that a diverse IT environment is crucial in protecting services and citizen information from cyber threats.
Full Article:
In a recent article by Federal News Network, the debate over whether government IT systems should be run by a single vendor or have a diverse set of vendors was discussed. The Center for Cybersecurity Policy and Law conducted a tabletop exercise to simulate an attack on two fictional U.S. agencies with varying degrees of IT concentration and diversity. The exercise revealed that agencies with more diversified technology were better equipped to fend off attackers compared to agencies with a high amount of technology from one vendor.
The Center for Cybersecurity Policy and Law provided recommendations for the National Institute of Standards and Technology (NIST) to define IT monoculture, and for government agencies to investigate and oversee the risk of IT consolidation. Overall, the study showed that a diverse IT environment is crucial in protecting services and citizen information from cyber threats.
