Due to multiple factors including content scraping and copyright infringement, some of our articles will now require a free account to signup, and our in-depth reporting will require a paid subscription. Please click here to learn more.
According to Homeland Security Secretary Kristi Noem, two dozen members of the Federal Emergency Management Agency’s (FEMA) Information Technology (IT) department have been terminated following the discovery of significant cybersecurity failures. These employees, including FEMA’s Chief Information Officer (CIO) Charles Armstrong and Chief Information Security Officer (CISO) Gregory Edwards, were dismissed for neglecting basic security protocols, which had the potential to put the American public at risk.
Article continues after these messages…
In a time where local news media coverage seems to be disappearing, your contribution is more important than ever. While our in-depth articles are for supporting members only, we won’t put our core news content behind a paywall, because we believe access to news should be democratized, instead of access for only those who can afford it.
But keeping the lights on and taking the fight to local accountability takes resources. Your monthly subscription directly funds our public records requests, website hosting, and time spent analyzing local government and events so you don’t have to.
We are the only newsroom in Washington County with facts-first focus, locally owned, independent, while keeping our core news content free. Will you help us keep it that way?
The vulnerabilities were identified during a cybersecurity review ordered by Secretary Noem. The Department of Homeland Security (DHS) Office of the Chief Information Officer (OCIO) uncovered substantial security weaknesses that had allowed unauthorized access to FEMA’s network. The investigation revealed multiple serious security oversights that enabled a threat actor to penetrate FEMA’s systems, posing a risk to the entire department and the nation. Fortunately, no sensitive data was compromised, and no American citizens were directly affected before the issue was detected.
During the review process, it was found that FEMA’s IT leadership, reportedly in place for decades, resisted efforts to rectify the security issues. These individuals are alleged to have avoided scheduled inspections and misrepresented the extent of the cyber vulnerabilities to officials. Specific failures identified included a widespread absence of multi-factor authentication, the use of outdated and restricted legacy protocols, unaddressed critical vulnerabilities, and insufficient oversight of operations.
These findings come despite FEMA allocating nearly half a billion dollars towards IT and cybersecurity initiatives in Fiscal Year 2025. The agency’s IT leadership is reported to have failed to meet its fundamental responsibilities, leaving the department vulnerable to cyberattacks, even after substantial financial investment.
Article by Mel Anara, based upon information from the Department of Homeland Security
Do you believe we got something wrong? Please read our publishing standards and corrections policy.
Video Spotlight
Did you know? Supporters get a reduced ad experience!
Sponsored Articles
Get daily and breaking news for Washington County, MD area from Radio Free Hub City. Sign up with your email today!
Paid supporters have a reduced ad experience!
Discover more from Radio Free Hub City
Subscribe to get the latest posts sent to your email.
