The General Services Administration Office of the Inspector General found that 116 files containing controlled unclassified information were shared with all GSA users and contractors on Google Drive. The exposed documents included personally identifiable information, physical security details, and vendor proposals with pricing data. The report attributed the failure to ineffective management of a third-party data loss prevention tool that GSA has spent $7.8 million on. The OIG noted that the tool failed to detect exposed documents and that GSA lacked standard naming conventions for sensitive files. GSA management stated that the documents were not exposed externally and that corrective actions were taken during the audit.
Read the full story at fedscoop.com.
Photo: markusspiske / Pixabay
