Dive Brief:

• The State Department’s Inspector General released a report on Friday that claims the department is failing to comply with federal cyber security standards.
• The report says the department is putting sensitive data at risk as a result.
• The report did, however, credit the department for making improvements over the last several years.  

Dive Insight:

The IG report says the department “lacks an effective cyber risk management program.”

The report also said this is not a new revelation.  From 2011 to 2014, the State Department's poor cybersecurity was identified by the inspector general, which reported that the lack of security standards “made the department vulnerable to cyberattacks and threats.”

The audit also found that the department’s Chief Information Officer didn't have the authority he needed to enforce effective information security measures.