GAO report finds inconsistent implementation of Defense Dept. incident reporting requirements

A new report from the Government Accountability Office finds significant deficiencies in how the Pentagon collects and uses cyber incident reporting data from the defense industrial base required under Defense Department policy.

Information systems used by the DIB “continue to be the target of cyber attacks,” the report released on Monday says. It includes a chart breaking down by year the over 12,000 cyber incidents reported since 2015.

The report says, “To combat these incidents, DOD has established two...