FEMA employees brought government devices abroad without authorization, including to China and Iraq, document … – FedScoop
The Federal Emergency Management Agency Office of the Chief Information Officer has tracked scores of employees bringing government mobile devices abroad, including to countries like China and Iraq, without authorization, according to a document obtained by FedScoop.
The issue was highlighted in a DHS inspector generals report published last July that pointed to concerns about how the emergency management agency handles the security of government-issued mobile devices.
Among other issues, the report centered on concerns with international travel. FEMA policies stipulate that employees cannot bring government devices abroad, while DHS policy requires the use of loaner devices and that any device detected internationally (without authorization) is turned off. The inspector general found that FEMA was not effectively tracking whether data on devices taken on international travel had been wiped.
FEMA is still working on fixes, originally expected in December of last year, to address the issue, which heightens security risks and violates broader Department of Homeland Security mobile device policy.
The document obtained by FedScoop similarly shows scores of devices detected abroad by FEMA. Many of them were tracked in countries that Americans commonly visit for vacation, including the Dominican Republic, the United Kingdom, and Mexico. But the list which displays devices that had access restricted and were then beginning to be investigated after being used abroad also shows that employees brought government devices to countries that fall under the International Traffic in Arms Regulation country list.
The document provides some insight into how FEMA handles the issue. While most of the incidents are unlabeled, some note that a case was investigated, that there was a tracking action, or a request for comment was issued, a spokesperson for FEMA told FedScoop. The document also displays dates that refer to when there was an update to the device in DHSs Enterprise Incident Database, or ECOP, portal.
If youre a large government organization, I think its always better to err on the side of safety and caution and preparation and training rather than have employees not know the potential risks, said Kristin del Rosso, the public sector field chief technology officer at Sophos, a security and hardware firm. There are different countries that have different rules [and] some dont respect personal privacy If youre in a customs border zone [and] you dont have access to your devices, they can do what they want with those devices.
She said the OIG report didnt raise massive alarm bells but it was good the agency was addressing the problem.
Notably, in February 2022, the Federal CIO Council released the final version of its guidance for international travel and government devices. The guidance establishes that government devices taken abroad risk being stolen, compromised, or damaged physically while also potentially exposing personal and government application data and account information. A blog announcing the guidance noted that both government and industry employees could be targeted by foreign adversaries looking to procure government data.
For a sense of scope, FEMA maintains tens of thousands of mobile devices, the OIG report outlines. The agency uses a cloud-based management system for monitoring the data on these devices, as well as connecting them to FEMAs network. One particular branch of the agencys Office of Chief Information Officer, the Mobility Service Center, is in charge of sanitizing devices that encounter security concerns, while another section called the Security Operations Center is supposed to detect devices abroad.
Ultimately, the OIG report found that 227 mobile devices without authorization were detected by FEMA internationally, and, that within a sample of nine, only two were turned off those two were on the ITAR list. FEMA did not provide the OIG any documentation as to whether those devices were sanitized, according to the report. The audit looked at mobile device management between October 2020 and April 2022 a somewhat distinct source of data from the one obtained by FedScoop, which came from the OCIO and includes incidents between October 2021 and June 2022. Still, the OIG document also shows that employees took devices to countries like China and Iraq.
A FEMA spokesperson said: DHS and FEMA are committed to continuously improving our cybersecurity posture to ensure information stored on mobile devices remains secure while supporting employee productivity. We take this matter seriously and have protocols and tools in place to ensure devices are used securely and in accordance with policy, regardless of location. We recognize the sensitivity around devices being taken to countries with heightened security risks and have specific procedures for when employees travel with government devices.
To deal with this problem, FEMA concurred with several recommendations made by the DHS OIG in the report, including implementing new documentation of device wiping, modifying mobile technology sanitization procedures, communicating requirements to sanitize devices taking on authorized international travel, and updating FEMAs response playbook procedure to require disabling devices taken abroad without authorization.
But while FEMA initially said it would complete those recommendations by the end of 2023, an agency spokesperson told FedScoop that completing them is still an ongoing process. The DHS OIG did not confirm whether it had received an update from FEMA about its progress. The Cybersecurity and Infrastructure Security Agency and the Office of Management and Budget both declined to comment and directed FedScoop to FEMA.
We take this matter seriously and have protocols and tools in place to ensure devices are used securely and in accordance with policy, regardless of location, said a spokesperson for DHS in a statement to FedScoop. We recognize the sensitivity around devices being taken to countries with heightened security risks and have specific procedures for when employees travel with government devices.
The DHS spokesperson continued: We appreciate DHS OIGs work which showed that there have been inconsistencies in following these policies and procedures in the past. FEMA has completed work to address each recommendation in OIGs July report and expects these recommendations to be resolved and closed following OIGs review of our documentation.
Read the rest here:
FEMA employees brought government devices abroad without authorization, including to China and Iraq, document ... - FedScoop
- US OKs potential sale of aircraft support to Iraq, Pentagon says - The Jerusalem Post - April 16th, 2024 [April 16th, 2024]
- FBI charges arms dealers for conspiring to send weapons to Sudan, Iraq - USA TODAY - April 16th, 2024 [April 16th, 2024]
- Biden cheat sheet for Iraq PM meeting caught on camera -- including instructions to 'pause' - New York Post - April 16th, 2024 [April 16th, 2024]
- The Met, Amid an Audit of its Holdings, Returns an Ancient Statue to Iraq - The New York Times - April 16th, 2024 [April 16th, 2024]
- Iraq Hopes to Expand Economic Relationship With the U.S. - OilPrice.com - April 16th, 2024 [April 16th, 2024]
- US and UK forces help shoot down Iranian drones over Jordan, Syria and Iraq - The Guardian - April 16th, 2024 [April 16th, 2024]
- Footage shows Iranian Shahed 136 drone flying over Iraq en route to Israel - The Times of Israel - April 16th, 2024 [April 16th, 2024]
- Kataib Hezbollah is Part of Iraq's PMF - The Washington Institute - April 16th, 2024 [April 16th, 2024]
- Denmark will close down embassy in Iraq - The Jerusalem Post - April 16th, 2024 [April 16th, 2024]
- Iraq reopens airspace after Iran's strikes on Israel - The New Arab - April 16th, 2024 [April 16th, 2024]
- Biden to host Iraq's leader after Iran's attack on Israel spurs chaos across the Middle East - Yahoo! Voices - April 16th, 2024 [April 16th, 2024]
- Iraq Needs a New Kind of Partnership With the United States - Foreign Affairs Magazine - April 16th, 2024 [April 16th, 2024]
- Iraq denies any drones or missiles were launched from its territory during Iran attack - The Times of Israel - April 16th, 2024 [April 16th, 2024]
- Jordan, Iraq and Lebanon reopen airspace after Iran attacks - The Jerusalem Post - April 16th, 2024 [April 16th, 2024]
- Iraq postpones vote on bill including death penalty for same-sex acts - The Times of Israel - April 16th, 2024 [April 16th, 2024]
- Stroudsburg man sentenced to 70 years for torturing employee in Iraq - 69News WFMZ-TV - April 16th, 2024 [April 16th, 2024]
- Iraq's struggle, divided between the US and Iran - The Jerusalem Post - April 16th, 2024 [April 16th, 2024]
- Iraqi Airways announces the resumption of flights between Iraq and Iran - Reuters - April 16th, 2024 [April 16th, 2024]
- Who are Iran's proxies threatening Israel? - The Jerusalem Post - April 16th, 2024 [April 16th, 2024]
- Wreckage of Iranian missiles and drones bound for Israel found in Iraq - The National - April 16th, 2024 [April 16th, 2024]
- Iraqi PM tells US President that Iraq is shifting from a military alliance to economic ties with the US - Iraqi News - April 16th, 2024 [April 16th, 2024]
- Iraq PM arrives in Washington - Arab News - April 16th, 2024 [April 16th, 2024]
- Defense relationship part of US-Iraq talks in Washington next week, US official says - Reuters - April 16th, 2024 [April 16th, 2024]
- Ex-Sen. Bob Graham of Florida dies at 87; led Intelligence Committee after 9/11 and opposed Iraq invasion - The San Diego Union-Tribune - April 16th, 2024 [April 16th, 2024]
- How an Iraq War veteran coped with PTSD by using taste mindfulness and bourbon - Fox News - April 16th, 2024 [April 16th, 2024]
- Jordan, Iraq and Lebanon reopen airspace after Iran attacks - Deccan Herald - April 16th, 2024 [April 16th, 2024]
- Prime Minister Sudani's Pivotal US Visit and Its Implications for Iraq's Future - Wilson Center - April 16th, 2024 [April 16th, 2024]
- George Michael Took a Stand Against the Iraq War - Jacobin magazine - April 16th, 2024 [April 16th, 2024]
- Iraq to enhance air fleet with $140m US aircraft support deal - Airforce Technology - Airforce Technology - April 16th, 2024 [April 16th, 2024]
- Investigating Torture: FBI-HSI Investigation Leads to U.S. Citizen's Conviction for Human Rights Violations in Iraq FBI - Federal Bureau of... - April 16th, 2024 [April 16th, 2024]
- Iraq's "Resistance" Factions Shift to Major Crackdown on Media Spaces - The Washington Institute - March 2nd, 2024 [March 2nd, 2024]
- Couple Travels to Iraq After Vowing to Visit All 195 Countries Their Experience Goes Viral (Exclusive) - Yahoo Entertainment - March 2nd, 2024 [March 2nd, 2024]
- The devastation of Gaza was inevitable: A comparison to US operations in Iraq and Syria - The Times of Israel - March 2nd, 2024 [March 2nd, 2024]
- A careful rethinking of the Iraq War - MIT News - March 2nd, 2024 [March 2nd, 2024]
- Iraq War veteran struggles to access VA care in rural area - DAV - March 2nd, 2024 [March 2nd, 2024]
- Maintaining the best thing the US built in Iraq: Continued support to the Iraqi Counterterrorism Service - Middle East Institute - March 2nd, 2024 [March 2nd, 2024]
- Couple Travels to Iraq After Vowing to Visit All 195 Countries Their Experience Goes Viral (Exclusive) - PEOPLE - March 2nd, 2024 [March 2nd, 2024]
- Iraq's Twenty Years of Carnage | Joshua Hammer - The New York Review of Books - March 2nd, 2024 [March 2nd, 2024]
- Thousands of Ugandans may sue over U.S. security work in Iraq, Afghanistan - Semafor - March 2nd, 2024 [March 2nd, 2024]
- Book Review: The Achilles Trap, by Steve Coll - The New York Times - March 2nd, 2024 [March 2nd, 2024]
- Iraq/KRI: Further Information: Journalist Released After Three Years Imprisonment: Guhdar Zebari - Amnesty International - March 2nd, 2024 [March 2nd, 2024]
- He saw the horrors of PTSD after serving in Iraq. Now this former Goldman Sachs analyst has a startup aimed at improving mental health treatment -... - March 2nd, 2024 [March 2nd, 2024]
- Cafe in Iraq allows customers to play with cats - WNCT - March 2nd, 2024 [March 2nd, 2024]
- Iraq Attracts Wave of Saudi and Gulf Investments for the First Time - The Media Line - March 2nd, 2024 [March 2nd, 2024]
- Iraq War failures can be boiled down to miscommunications, according to this author - WLRN - March 2nd, 2024 [March 2nd, 2024]
- Steve Coll discusses collaboration with RCFP attorneys for new book, "The Achilles Trap" - Reporters Committee for Freedom of the Press - March 2nd, 2024 [March 2nd, 2024]
- The National Guard's quiet role in Iraq, Syria and Jordan - Yahoo! Voices - March 2nd, 2024 [March 2nd, 2024]
- Two killed in Turkish drone strike in northern Iraq - Al Arabiya English - March 2nd, 2024 [March 2nd, 2024]
- Iraq to close all IDP camps by July 30 - Mission Network News - March 2nd, 2024 [March 2nd, 2024]
- President of the Republic: Iraq's oil production increased twofold to 4.7 million barrels in the past decade - Shafaq News - Shafaq News - March 2nd, 2024 [March 2nd, 2024]
- Third Edition of Antalya Diplomacy Forum Opens with Participation of Iraq Ministry of Foreign Affairs of the Republic of ... - - March 2nd, 2024 [March 2nd, 2024]
- Opinion: American airstrikes in Iraq, Syria, Yemen solidify a concerning reality - UT Daily Beacon - March 2nd, 2024 [March 2nd, 2024]
- Home Iraq Stories Rebuilding Social bonds through Baking - United Nations Development Programme - March 2nd, 2024 [March 2nd, 2024]
- Iraq's Central Bank sells over $1 billion in one week - Iraqi News - February 23rd, 2024 [February 23rd, 2024]
- Iraq's Alssad parters with Saudi Arabia's Al Rabie and Switzerland's Tetra Pak to tackle Iraq's food security - Iraqi News - February 23rd, 2024 [February 23rd, 2024]
- Iraq's positive trajectory serves as a beacon of hope - Arab News - February 23rd, 2024 [February 23rd, 2024]
- Iran-backed militias in Iraq claim to have targeted Israeli gas rig in Mediterranean - The Times of Israel - December 23rd, 2023 [December 23rd, 2023]
- I fought in Iraq, Israel has a sacred obligation to protect innocents that all those in uniform share - Fox News - December 23rd, 2023 [December 23rd, 2023]
- US troops in Iraq and Syria have faced over 100 attacks since October - Military Times - December 23rd, 2023 [December 23rd, 2023]
- Is Iraq really divided on resistance operations against US targets? - The Cradle - December 23rd, 2023 [December 23rd, 2023]
- Acting Deputy Secretary of State Nuland's Travel to Jordan and Iraq - United States Department of State - Department of State - December 23rd, 2023 [December 23rd, 2023]
- US must prepare for a long battle with Houthi rebels. Remember Iraq-Iran Tanker War in 1980s? - ThePrint - December 23rd, 2023 [December 23rd, 2023]
- Nikki Haley is correct that fentanyl deaths top casualties from 3 wars combined - The Dallas Morning News - December 23rd, 2023 [December 23rd, 2023]
- How Iraq is managing the Israel-Gaza crisis | Brookings - Brookings Institution - December 23rd, 2023 [December 23rd, 2023]
- Tragedies Born of Negligence in Iraq - Human Rights Watch - December 23rd, 2023 [December 23rd, 2023]
- No US troops injured in latest rocket strike at Iraq base - Stars and Stripes - December 23rd, 2023 [December 23rd, 2023]
- Senators Coons, Cruz introduce resolution to condemn attacks by Iranian military proxies on U.S. troops in Iraq and Syria - Senator Chris Coons - December 23rd, 2023 [December 23rd, 2023]
- Iraq and Turkey boost security ties in Ankara talks - The New Arab - December 23rd, 2023 [December 23rd, 2023]
- Iraqi militia attempts Eilat drone attack, was intercepted over Jordan - The Jerusalem Post - December 23rd, 2023 [December 23rd, 2023]
- Iraq heads to provincial elections, first in ten years - The Jerusalem Post - December 23rd, 2023 [December 23rd, 2023]
- Three Turkish soldiers killed in attack in northern Iraq ministry - Arab News - December 23rd, 2023 [December 23rd, 2023]
- 6 Turkish soldiers killed in terror attack in northern Iraq - Mehr News Agency - English Version - December 23rd, 2023 [December 23rd, 2023]
- WHO EMRO | WHO tackles low immunization challenges in Iraq | News | Iraq site - WHO Regional Office for the Eastern Mediterranean - December 23rd, 2023 [December 23rd, 2023]
- Iraq arrests fugitive wanted in connection with Speicher massacre - Rudaw Media Network - December 23rd, 2023 [December 23rd, 2023]
- Trkiye, Iraq agree on expulsion of PKK terrorist group | Daily Sabah - Daily Sabah - December 23rd, 2023 [December 23rd, 2023]
- Trudeau government to spend nearly $10M to support unemployed youth in Iraq - Toronto Sun - December 23rd, 2023 [December 23rd, 2023]
- Korea to face Iraq in final tuneup before Asian Cup in January - - December 23rd, 2023 [December 23rd, 2023]
- Iraq, Turkiye FMs meet to discuss security, water issues - Middle East Monitor - December 23rd, 2023 [December 23rd, 2023]
- 6 Turkish soldiers killed in terror attack in northern Iraq - News.Az - December 23rd, 2023 [December 23rd, 2023]
- Head of Iraq's National Wisdom Movement congratulates President Sisi for new term of presidency - Egypt Today - December 23rd, 2023 [December 23rd, 2023]
Tags: