VA struggles to balance cloud apps, security

Assistant secretary Baker said he can\'t let doctors store veterans\' data on unsecured systems in the cloud. But Baker said he wants to figure out how to solve...

By data breach report that data of more than 1,000 veterans were located on this shared Yahoo! calendar tool. Doctors and residents at one VA facility were using the online tool to communicate during shift changeovers or residents needing to retain information when they left VA to work at other hospitals.

Baker said no matter the need, the doctors violated VA’s data security, privacy and health information policies.

Earlier this year, VA shut down eight facilities using Google docs to share patient information under similar circumstances. Baker said he expects to shutter other instances in the future of facilities using similar tools because of their popularity and ease of use.

Baker said he is looking into how to make that balance work, but still has not found the right solution to this problem.

“I know that Google has moved forward with FISMA certification of some of the stuff they are doing so that is a possibility,” he said. “The issue there is that there are various levels of certification and what they have achieved is medium and for the types of information we store, it would have to be a high certification. But we look at is there a way to embrace the tool as it stands? Is there a way to bring the tool inside the VA firewall and control access to it a bit more and meet our requirements that way?”

Baker added that last thing he would consider is building a new tool themselves because the government’s development time and acquisition processes just can’t keep up with technology changes.

In the meantime, Baker said cybersecurity remains a major priority. He said in 2011, his office will complete its medical device architecture to describe how to secure them on the network. VA also will expand its visibility of devices on the network beyond laptops and desktop computers to printers and other devices.

All of this will come under tight budget constraints. Baker said he prepared for Congress to cut VA’s IT budget by $200 million in 2011. Agencies currently are under a continuing resolution through March 4.

“We had a substantial carry forward from 2010 to 2011 as a result of all discipline we instituted last year,” he said. “The Program Management Accountability System (PMAS) generated $250 million of cost avoidance is 2010 because of number of projects we held off of until we got them to a point where we thought they could succeed.”

He added that VA also carried over $700 million from 2009 to 2010 and about the same amount from 2010 to 2011.

Baker said he doesn’t agree that VA needs less money, but understands the rationale and the fact every agency is facing tight budgets.

(Copyright 2010 by FederalNewsRadio.com. All Rights Reserved.)

Copyright © 2024 Federal News Network. All rights reserved. This website is not intended for users located within the European Economic Area.

    Secretary of Defense Lloyd Austin

    Hundreds of troops kicked out under ‘don’t ask, don’t tell’ get upgraded to honorable discharges

    Read more
    Naval Academy Affirmative Action

    US Naval Academy says considering race in admissions helps create a cohesive military

    Read more
    Capitol

    Pentagon chief says a six-month temporary budget bill will have devastating effects on the military

    Read more