Indianz.Com

Audit: No one in charge of Indian trust data

WEDNESDAY, MAY 22, 2002

The Department of Interior's information technology systems could be plunged into chaos again based on the findings of a team of federal computer security experts.

More than five months after numerous security problems were first exposed, the audit has highlighted significant obstacles to an effort flagged as "high risk" by the White House. Lack of accountability, limited funds and little direction are among the major challenges cited, according to a 294-page draft report completed last month.

"Management commitment to computer security exists on paper, but not on practical implementation," the computer security expert assist team (CSEAT) of the National Institute of Standards and Technology wrote on April 1.

The most damaging finding, however, affects the status of computer systems that process $3.1 billion in annual payments to tribes and individual Indians. Shut down by a federal judge's order in December, a court investigator has allowed the gradual reconnection of dozens of Indian trust systems based on sworn declarations by department officials and employees under an effort overseen by Associate Deputy Secretary Jim Cason.

But according to the audit, no one is in charge of Indian trust data despite appearances otherwise. Senior officials, including Special Trustee Tom Slonaker and other top leaders, have failed to take the initiative to define this very basic concept, the experts reported, a problem that permeated the department to its lowest levels.

"Individuals that have responsibilities for processing trust information state that their job does not involve such information," the report stated. "Other individuals that know they process Indian trust information are unsure of which pieces of information are Indian trust information and which are not."

The lack of a clear meaning of Indian trust data was at the center of intense and slow-moving negotiations between Cason and special master Alan Balaran, whose investigation uncovered risks to hackers. After months of talks, the last major system which processes payments to tribes and Indians was restarted in March.

In all the cases, Balaran gave his nod based on assurances to the protection of trust data. Based on the NIST review, the certifications offered by the Interior would be in doubt because of failures of top officials to define a key term.

The department acknowledged the review's shortcomings in its most recent status update. "Indian trust information is not safeguarded due to inconsistent and ineffective leadership," Cason wrote in a section of the report that discussed a briefing received by NIST.

Cason also reported the results of a January 2002 audit by SRA International, a computer security firm that has been retained by the department and whose reports have documented long-standing problems went largely ignored until recently. The company identified nearly 600 vulnerabilities, 96 percent of which were classified as "high" risks.

SRA and NIST, which is part of the Department of Commerce, made similar findings about the lack of program planning, according to the Interior's 9th quarterly report. Cason said the department would provide comments to NIST this month in preparation for a final analysis.

Relevant Links:
Indian Trust, Department of Interior - http://www.doi.gov/indiantrust
Indian Trust: Cobell v. Norton - http://www.indiantrust.com
Trust Reform, NCAI - http://130.94.214.68/main/pages/
issues/other_issues/trust_reform.asp

Related Stories:
No one jumps into trust fund hot seats (5/6)
Navajo royalty owners get IOUs (5/6)
Interior agency working on security (4/30)
Key trust fund system being restarted (3/25)
Judge 'dumbfounded' with DOI (3/15)
Interior blames security on consultants (2/26)
DOI: We're writing checks (2/25)
Defense on security charge lacking (2/22)
BIA: Grazing checks in 'backlog' (2/22)
Judge says 'duped' by government (2/21)
Judge blasts Interior 'deception' (2/21)
NCAI President testifies on shutdown (2/21)
Contempt testimony concludes (2/21)
Judge says 'duped' by government (2/21)
Judge blasts Interior 'deception' (2/21)
NCAI President testifies on shutdown (2/21)
Contempt testimony concludes (2/21)
DOI: 'No idea' on royalty payments (2/21)
Royalty checks still not out (2/20)
Letter: Dom Nessi took my job (2/19)
email@nps.gov sputtering through (2/19)
No payments hurt Indian Country (2/14)
Griles has hope on contempt (2/13)
Norton concludes testimony (2/13)
Norton takes the stand in contempt (2/13)
Norton agrees to testify (2/12)
Norton set for trial testimony (2/12)
Audit finds more security holes (2/8)
Norton dodges questions on Internet shutdown (2/7)
McCaleb: From a donkey to Star Trek (2/6)
Navajo Nation distributing checks (2/6)
Interior security funds outlined (2/5)
Navajo Nation approves royalty funds (1/30)
Letter: Enough is enough! (1/30)
Gaming commission ignoring Norton (1/28)
BIA to start payment processing (1/25)
Interior turning on trust fund system (1/24)
Computer security finally a concern (1/23)
Indian trust seen in new light (1/23)
Interior shutdown has wide effects (1/21)
Norton told of security problems (1/18)
Interior's weaknesses not unique (1/17)
Norton effort 'too little, too late' (1/16)
Interior shutdown still unresolved (1/16)
Norton notes 'challenge' of daily work (1/15)
McCaleb tries to explain computer shutdown (1/11)
Interior waited weeks on trust fund shutdown (1/9)
Order on trust fund payments sought (1/8)
Debate continues over trust fund shutdown (1/7)
Speedy trust fund payments sought (1/7)
Interior says working on shutdown (1/7)
Little hope for trust fund payments (1/4)
Computer security charge stands as checks delayed (12/21)
Checks to Great Lakes region delayed (12/20)
For BIA, a working holiday (12/19)
Taking lead on trust reform proves tough (12/19)
Baucus: Delay in checks 'unacceptable' (12/19)
Judge orders Interior reconnect (12/18)
Interior shutdown was 'overreaction' (12/18)
'Not be a very bright Christmas' (12/18)
Cost of Interior shutdown not known (12/17)
Interior computer agreement dropped (12/14)
Interior computer order finalized (12/13)
Editorial: Still ripping off Indians (12/12)
Griles in charge of IT reform (12/11)
Floods more important than Indians (12/10)
Judge holds security hearing (12/8)
DOI Shutdown: 'We're Hurting Tribes' (12/7)
From the top, a gamble in trust (12/7)
Norton acknowledges Internet problems (12/7)
'We're in the Dark' (12/7)
Judge orders Interior to cut Internet access (12/6)
Security contempt charge added (12/6)
Transcript of Dec. 5 trust fund hearing (12/6)
Interior doesn't understand court order (12/6)
Judge cuts trust fund access(12/5)
Report reveals attacks on tribal, Indian trust (12/5)
No Trust: Hacking the Department of Interior (12/5)
Judge holding secret hearings (12/4)
New: Security report released (12/4)