US State Dept has no idea if its IT security actually works, say auditors

End-of-life systems still in use, poor inventory control, and China’s hunting

The US Department of State has largely failed to implement an effective cybersecurity risk program, auditors concluded in a report last week. That means a crucial arm of the American government is potentially wide open to cyberattacks it may not be able to identify or stop.…