Inspector general: DHS makes strides under cyber law, falls short on contractor data security

The Department of Homeland Security's inspector general's office has determined that DHS has “taken a number of steps” to implement cybersecurity controls across the agency under the Cybersecurity Act of 2015, but could benefit from additional capabilities and policies to assure contractors' data security.

The report, which offers no policy recommendations, found that the department has developed agency-wide access policies for providing access to systems with personally identifiable information in compliance with federal standards.

Further, it revealed that DHS...