SEC Cited for Failing to Protect Its Data Network

The U.S. Securities and Exchange Commission has failed to protect its data network against possible breaches, to encrypt highly sensitive information, or to use strong enough passwords, the Government Accountability Office said. In addition to the cybersecurity failings, even the physical security in place to protect SEC data and equipment from being accessed or stolen is lax, a 25-page GAO report said, with workstations located in an area open to all agency staff.