Information security incidents in government agencies continue to rise

May 19

For the second year in a row, information security incidents in government agencies increased by more than 40 percent in fiscal year 2013, according to an annual report on how government agencies handle security. A security incident includes situations like a stolen laptop, a computer virus download or the mishandling of paper records.

Since 2010, the number of reported security incidents has more than doubled. While total reported incidents increased 43 percent, from about 153,000 in fiscal year 2012 to nearly 219,000 in 2013, compliance with government security standards also increased, from 73 percent to 81 percent, signaling improvements in the presence of security measures despite more chances for private information to leak.

The Department of Veterans Affairs (VA) reported the most security incidents, at 11,368, and the National Science Foundation reported the fewest, with 46. However, this doesn’t necessarily mean the VA is the least secure, since larger agencies have more chances of having security breaches. The VA, with over 320,000 employees, is the second largest federal department, smaller only than the Department of Defense, and serves approximately 70 million people.

The Federal Information Security Management Act (FISMA) details government standards for security. In 2013 compliance scores were determined by 99 criteria, ranging from being able to detect and block unauthorized software to security training.