OIG identifies systemic management failures enabling the exposure
1 Oct 29 · 13d ago · 3 articles · 1 post · 2 sources · development 1 of 1
The inspector general found GSA lacks an approval process for sharing sensitive information and a standard naming convention to prevent CUI exposures. The agency is mismanaging its data-loss prevention tool: annual reviews are incomplete or undocumented, relevant search terms are not implemented, optical character recognition is not enabled, and GSA was unaware the tool has a 15-megabyte file size limitation.
“We also found that GSA lacks: (1) an approval process for properly sharing sensitive information and (2) a standard naming convention that could more effectively prevent exposures of CUI in GSA's Google Drive.”
GSA Office of Inspector GeneralGeneral Services Administration (GSA) Federal agency subject of auditGSA Office of Inspector General Internal audit authority
The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump
Reported in the same hours no headline names this development itself — these 1 claim were published in its stretch
-
first by The Register, 13d ago
What people said 1 voice · verbatim
-
D
# CloudStorage : as safe as the most ignorant person in any given workforce. https://www. theregister.com/public-sector/ 2026/10/29/gsa-left-sensitive-google-drive-files-open-to-staff-contractors/5306430
All 1 developments of GSA audit finds 116 sensitive files improperly shared on… →
NewswiresMastodon