Saturday, June 29, 2013

Should the NSA stop outsourcing positions as a measure to prevent security breaches such as those created by Ed Snowden?

As Ed Snowden travels the globe to skirt capture by US officials, debate ensues regarding the measures that lead to his access of highly sensitive classified information. The drive to outsource often surrounds an IT strategy that seeks to lower operational costs and enhance IT capabilities at a faster rate with lower costs.The pros and cons of development models for outsourcing versus in-house development along with associated risks should be considered when weighing IT Strategy.  The benefits of outsourcing are not without risks as the US government has come to learn. IT industry and political experts are suggesting that the Feds should in-source employees with access to the type of classified information that Snowden was exposed to during his employ. Additionally, suggestions to implement a tighter system of monitoring those employees with access to classified information is being considered as NSA security policies are reviewed, scrutinized and revised based on the investigation. Would clearly stated policies on processes available to dissenting voices within the NSA have prevented Snowden's actions? Was there security education and training provided by the NSA to contractual employees? Could this have potentially prevented one of the biggest security compromises in US history? 

No comments:

Post a Comment