NSA SecSDLC was inadequate

The debate rages on about the NSA's bungling of policies that enabled security contractor Snowden's access to highly classified documentation resulting in subsequent leak of classified documents. What is clear is that the need to mitigate and manage risk to future threats and attacks is a priority here. A failure to be proactive created the gap in understanding threats to the NSA's security policies with the need now to establish an information security project with emphasize on mitigating future risk through development of a SecSDLC.

http://news.yahoo.com/nsa-chief-keith-alexander-system-did-not-prevent-142449841--abc-news-topstories.html