A lack of collaboration prevents bureaus within the Commerce Department from fully realizing the benefits of incident detection and response capabilities provided by Managed Trusted Internet Protocol Services, the department’s inspector general has said.
MTIPS offers Internet and bundled security services that bureaus use to comply with OMB’s Trusted Internet Connection initiative, but the Bureau of Economic Analysis, Bureau of Industry and Security, International Trade Administration, and Patent and Trademark Office do not consider MTIPS security services effective in supporting incident detection and response.
According to the IG, relatively littlecommunication takes place between bureaus and theMTIPS provider, and bureaus indicatethey are not receiving significant incident monitoring and detection services.
It called on those bureaus that don’t have around-the-clock coverage from security operations centersto work with the MTIPS provider to evaluate MTIPS services to fill gaps in SOC coverage after business hours. It also recommended that bureaus interact with the MTIPS provider to explore opportunities that leverage MTIPS services to reduce or eliminate security services currently handled by the bureau and ensure that MTIPS security services are fully delivered and effectively utilized.
