funsec mailing list archives

San Francisco: Audit Finds City's IT in Disarray


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Thu, 4 Oct 2007 19:24:19 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Via The San Francisco Chronicle.

[snip]

The absence of central oversight and planning in the purchase of computer
and information technology by San Francisco City Hall is wasting millions
of dollars a year, inhibiting efficient use of government data and creating
technological backwaters across municipal government, according to an audit
released Wednesday.

The audit by the Board of Supervisors budget analyst also found city
computer networks are vulnerable to outside attacks, and a large-scale
project to consolidate criminal databases used by law enforcement and the
courts is years behind schedule.

"It's pretty devastating. I don't think you can be too hyperbolic," said
Supervisor Tom Ammiano, who requested the audit. "There doesn't really seem
to have been anyone in charge of the store."

[snip]

More:
http://sfgate.com/cgi-bin/article.cgi?f=/c/a/2007/10/04/BAR7SJF8O.DTL

Note: If San Francisco doesn't get it's collective IT act together,
they are likely to find themselves in the same situation as other
California government network resources -- hacked:

http://www.sacbee.com/103/story/413669.html

- - ferg

p.s. And by the way, there are still several *.ca.gov websites
out there that have been compromised, and either the contact
information is incorrect, non-existent, or the "lights are on
and nobody is home."

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFHBT3hq1pz9mNUZTMRAjT1AJ900OxNZxG2UCUIOj1sYgp3Vjzz5wCgiw62
CoXRQmr9FsO10pijr0iGxMw=
=gcOn
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: