000			03609nam a2200469 i 4500
999			_c292440 _d292440
001			on1098213632
003			OCoLC
005			20200423203356.0
006			m o d f
007			cr nn|||||||||
008			190424s2019 dcua o f000 0 eng c
040			_aPUCPR _beng _erda _epn _cZCY _dOCLCF _dGPO _dMvI
042			_apcc
043			_an-us---
074			_a0718-C-01 (online)
086	0		_aJ 37.2:C 99
099			_aJ 37.2:C 99
110	1		_aUnited States. _bDepartment of Justice. _bAudit Division,
245	1	0	_aAudit of the Federal Bureau of Investigation's cyber victim notification process / _cU.S. Department of Justice, Office of the Inspector General, Audit Division.
246	1		_iAt head of title: _aRedacted for public release
264		1	_aWashington, DC : _bOffice of the Inspector General, U.S. Department of Justice, _c2019.
300			_a1 online resource (ii, 48 pages) : _billustrations
336			_btxt
337			_bc _2rdamedia
338			_bcr _2rdacarrier
500			_a"Audit Division 19-23."
500			_a"March 2019."
500			_a" ... we examined the FBI's adherence to Executive Order 13636, Improving Critical Infrastructure Cybersecurity, and the FBI Cyber Division Policy Guide 0853pg as well as other related policies." -- Executive summary.
500			_a"The FBI established Cyber Guardian for tracking the production, dissemination, and disposition of cyber-victim notifications which can help victims mitigate the damage caused by cyber intrusions and increase the potential for intelligence collection by the FBI. However, we found that the data in Cyber Guardian was incomplete and unreliable, making the FBI unable to determine whether all victims are being notified. The quality of formal requests for investigative actions, called leads, set for victim notification was inconsistent. In addition, not all agents indexed victims within Sentinel, as required. Together, the inconsistent leads and indexing contributed to some notifications not being tracked property or taking place too long after the attack for the victim to effectively mitigate the threat to its system. Further, the Department of Homeland Security (DHS) -- a partner in using Cyber Guardian --was not entering information into the system as required, contributing to the incompleteness of data in Cyber Guardian. We also found that victims identified in national security cyber cases were not informed of their rights as required by the Attorney General Guidelines for Victim and Witness Assistance (AG Guidelines). The FBI plans to replace Cyber Guardian in fiscal year (FY) 2019 with CyNERGY, a new system which may solve some, but not all data quality issues." -- Executive summary.
500			_aReport includes FBI's response to draft audit report.
500			_aGPO Cataloging Record Distribution Program (CRDP).
588			_aDescription based on online resource; title from PDF cover (OIG.JUSTICE.gov website, viewed April 24, 2019).
710	1		_aUnited States. _bDepartment of Justice. _bOffice of the Inspector General,
856	4	0	_uhttps://purl.fdlp.gov/GPO/gpo133609
610	1	0	_aUnited States. _bFederal Bureau of Investigation _xInformation technology _xEvaluation.
610	1	0	_aUnited States. _bFederal Bureau of Investigation _xManagement _xEvaluation.
650		0	_aManagement audit.
650		0	_aCyberterrorism _zUnited States _xPrevention _xEvaluation.
650		0	_aComputer networks _xSecurity measures _zUnited States.
650		0	_aNational security _zUnited States.
942			_2sudocs _c8