Death toll in Pakistan rises up to 30,000. Whatever your belief system is please think of the

REMEMBER WHEN THIS STORY BROKE? Finally, somebody is dealing with the issue. Check this out!

http://www.gcn.com/online/vol1_no1/41035-1.html

VA IT security gaps extend to contractors
06/14/06 -- 04:15 PM
By Mary Mosquera,

Rep. Buyer: Department CIO needs IT security enforcement authority
 
[b]The Veterans Affairs Department said today that it has been investigating allegations that an offshore medical transcription subcontractor last year threatened to expose 30,000 veterans’ electronic health records on the Internet in a payment dispute with a VA contractor. [/b]
The VA assistant inspector general referred to the investigation during questioning in a congressional hearing on VA’s data security environment in the wake of the theft of sensitive data of 26.5 million veterans, active duty military and reserves officers.

The medical transcription incident highlights how gaps in information security also extend to contractors, said Michael Staley, VA’s assistant inspector general for auditing. Some VA medical transcription contractors have used offshore subcontractors in India and Pakistan without VA’s approval and without adequate controls to ensure veterans’ health information was secure under the Health Insurance Portability and Accountability Act, according to an audit released today.

“Contracts do not specify criteria for how to protect information,” Staley told the House Veterans Affairs Committee.

Staley enumerated audits of information management security under the Federal Information Security Management Act, the Consolidated Financial Statement and Combined Assessment Program that revealed significant vulnerabilities. These include VA not controlling and monitoring employee access, not restricting users to only the data they need and not terminating accounts of departing employees in a timely manner.

In last year’s FISMA review, the IG provided 16 recommendations, including addressing security vulnerabilities of unauthorized access and misuse of sensitive information and data throughout VA demonstrated during its field testing. All 16 recommendations remain open, he said.

Audits also found instances where out-based employees send veterans’ medical information to the VA regional office through unencrypted e-mail; monitoring remote network access and usage does not routinely occur; and off-duty users’ access to VA computer systems and sensitive information is not restricted.

“VA has implemented some recommendations for specific locations identified but has not made corrections VA-wide,” he said.

From fiscal years 2000 to 2005, the IG identified IT and security deficiencies in 141, or 78 percent, of 181 Veterans Health Administration facilities reviewed, and 37, or 67 percent, of the 55 Veterans Benefits Administration facilities reviewed.

“We recommended that VA pursue a more centralized approach, apply appropriate resources and establish a clear chain of command and accountability structure to implement and enforce IT internal controls,” Staley said.

The underlying situation is the VA’s department CIO does not have authority to enforce compliance with data security and information management and recommendations from GAO, said Veterans Affairs Committee chairman Steve Buyer (R-Ind.).

Buyer traced problems in security enforcement to a memo dated April 2004 from the general counsel that said the department CIO did not have enforcement authority.

The CIO, undersecretaries who lead VA’s benefits, health and burial administrations, and the VA secretary share responsibility for enforcement, said Gregory Wilshusen, director of information security issues for the Government Accountability Office.

“Information security is a governmentwide problem, and we have talked with OMB about that,” said Linda Koontz, director of GAO’s information management issues.

Buyer expressed frustration that there are no consequences for “recalcitrant” agencies that do not correct problems that GAO has repeatedly highlighted. He cited the Privacy Act, which has been strengthened with consequences.

“If you have a bureaucracy so strong in the department that the secretary or political bodies are unable to act, don’t you think the president or vice president or OMB needs to know that because there are monetary consequences behind that inaction? I’m bothered that GAO doesn’t have the higher authority to which they can turn,” Buyer said after the hearing.

After several more hearings this month, Buyer and his committee will make recommendations or craft legislation. He suggested that Congress consider looking at strengthening FISMA.

“We can even come up with that in our language, but we’re not going to have jurisdiction over that. We’ll have to work with Mr. Davis [House Government Reform Committee chairman Tom Davis (R-Va.)] and his committee. I’d be more than happy to do that,” he said.

© 1996-2006 Post-Newsweek Media, Inc. All Rights Reserved.

I have a friend whose mother passed away in March of this year.  She was an IC and thus earned income right up until the time of her death.  Is her daughter now responsible for filing an income tax return and/or paying taxes on this income?  I know an accountant for her would be handy in this situation, but I thought I might get some opinions here as well.  Thanks!!

Okay, now that I have job offers, I have to figure out what to do.

Right now:  I am employed on site as an admin asst with great insurance, good pay, people I like, and job security.  The downside is missing my family--I only see them about four hours in the evenings and most of that is bathtime, cooking supper, you get the picture.  I also have quite a drive to work and parking is HORRIBLE.  I feel I work LONG weeks and then have little to show in the way of my emotional outlook and cash left over after buying gas, etc. 

What could be:  I have job offers to come back home and type full time.  I would be here to see my children and be close to their schools if something happened.  Also, my husband has built me a gorgeous office by closing in a porch, so there's a big three-paned picture window that overlooks my garden.  I can envision myself at home, but there's a tremendous amount of fear that's holding me back. I am AFRAID because I remember how long it took to get lines in every day.  I worry about the security of benefits, PTO, and just the job itself.  I don't want to be sitting in this office 7 days a week from 6 a.m. to 7 p.m.  I hope I'm more capable than that, but sometimes it's not the MT, it's the conditions, and if I give up my other job... 

I guess I am just venting and worrying and wondering.  After a two-year break, can I come back home and be productive and accountable as an MT?  Can I count on the industry?    I really wanted to come home, but now I'm afraid.

TIA for any and all suggestions!

Dr. dictates:

Reason for Death:  Incompatibility with life.

I would actually get to the point where I could feel my head nodding...80% of what I got was VR....I was beginning to feel retarded.  The only straight transcription that was sent to me were the worst dictators, cause the company knew I would do it, take my time, research, relisten, etc.  I've always felt more alive transcribing than editing.   Cat

Now, I'm sure that this has been covered again and again, but I am so upset that I just have to say something!  I am so SICK and TIRED of every single job listing saying, "New graduates need not apply," etc.  It's like a slap in the face...you're not good enough, we just know it, don't even THINK about submitting you resume to us you subhuman.  I have worked at previous jobs in which I was as good after two months of experience as some who had been working there 3 or more years.  (I'm sure everyone has had this feeling.  I'm not trying to insinuate that I'm a genius or anything.)  Why can't anyone just give me a chance?  How do they know that I'm not good enough?!?!?  Meanwhile, I've invested a moderate amount of money and a huge amount of time into this for what???  Anyway, that's my rant.  Thanks for listening and sorry for the negativity.

I'm not sure if he went back to myspace a second time, I'll have to ask him.  Thanks for all the help.  I got it at Best Buy so I think I'll take it back there and see what they have to say also. I just don't want him away at college and have the darn thing crashing all the time.  It's not like you can just keep buying new ones at that price!