Hacker News Reader

> Nobody seems to be in charge.

That's indeed the problem. There was a strong push for a while to put NSA in charge of civilian infosec infrastructure. But Congress didn't really want to put a combat support agency in that role. So DHS is technically in charge of that. But we still have the majority of federal agencies stuck fending for themselves when it comes to securing their networks. Without stronger action from Congress, this may never change.

View on HN

Because when I think of technical sophistication, I think of DHS.

Exactly, they simply have never had the institutional knowledge required to secure government networks.

Their hostile attitude towards computer security pay incentives practically guarantees nobody will jump ship from IOC or TAO. This problem will likely only be resolved by a big media stink.

> Without stronger action from Congress, this may never change.

You should go read the cybersecurity act passed in December of 2015, and realize that DHS is now authorized to force agencies to use it's security and offerings.

Reply on news.ycombinator.com