Pentagon CISO Accused Of Leaking Classified Intel

Katie Arrington, Chief Information Security Officer (CISO) for the Pentagon’s  Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD)  is being investigated by the Department of Defense. 

The top Pentagon official, who has been overseeing its new cyber security initiative, has been placed on indefinite leave following allegations that she disclosed classified information from a military intelligence agency without authorisation.

Arrington, a former South Carolina congressional candidate who went on to work for the Pentagon, was first placed on leave in May 2021. The US government has given no details of the allegations against her 

The National Security Agency, which is part of the Defense Department, gathers some of the nation’s most sensitive signals and eaves-dropping intelligence from foreign adversaries, mostly via satellite. "If this preliminary decision becomes final, you will not be eligible for access to classified information" or "assignments to duties that have been designated national security sensitive," a memo sent to Arrington from the OUSD said, according to Bloomberg.

Arrington's role included dealing with the cyber security requirements for the 300,000 companies that do business with the Pentagon.

According to her biography on the OUSD website, Arrington is the "central hub and integrator" in her post which requires her to "align acquisition and sustainment cyber strategy." It said she was also key to "efforts to enhance cyber security within the Defense Industrial Base." 

Her biography describes her as a mother of three and a grandmother of four who had "an extensive career as a legislator and senior cyber executive in private industry."  This included over 15 years of cyber experience from her positions at Booz Allen Hamilton and Dispersive Networks.

Former US Air Force officer and cyber security specialist has John Gartska taken up Arrington's post in an acting role.

Bloomberg:      Newsweek:       The Hill:      Nation:        CountOn2:     Post&Courier

You Might Also Read: 

Cyber Spying For A Future War:

 

« History, Robotics, Artificial Intelligence & Bio-Technology
Technical Debt Is A Serious Threat To Innovation »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Coalfire

Coalfire

Coalfire specialises in cyber risk management and compliance. Our services span the cybersecurity lifecycle from advisory and compliance, to testing and engineering, monitoring and optimization.

XBOSoft

XBOSoft

XBOSoft is a software QA and testing company. We cover the entire QA and testing life cycle including software and application security.

Chainalysis

Chainalysis

Chainalysis provides blockchain analysis software to prevent, detect and investigate cryptocurrency money laundering, fraud and compliance violations.

Herbert Smith Freehills

Herbert Smith Freehills

Herbert Smith Freehills is a leading professional services including data protection and privacy.

CTERA Networks

CTERA Networks

CTERA provides cloud storage solutions that enable service providers and enterprises to launch managed storage, backup, file sharing and mobile collaboration services using a single platform.

Ledger

Ledger

Ledger is a leader in security and infrastructure solutions for cryptocurrencies and blockchain applications using its proprietary technology.

Cytelligence

Cytelligence

Cytelligence is a cyber security consulting company with deep expertise in Cyber Breach Response, Cyber Breach Investigations, and Digital Forensics.

Voxility

Voxility

Voxility provides Infrastructure-as-a-Service in the biggest Internet hubs in the world.

Keysight Technologies

Keysight Technologies

Keysight is dedicated to providing tomorrow’s test technologies today, enabling our customers to connect and secure the world with their innovations.

Reliance Cyber

Reliance Cyber

Reliance Cyber (formerly Reliance ACSN) help to monitor and manage your organisation’s security infrastructure 24/7, so you can make sure all threats and issues are dealt with.

Dataprise

Dataprise

Dataprise is a leading IT managed services provider offering IT Management and Help Desk Support Services, Cloud Services, Information Security Solution, IT Strategy and Consulting.

Airgap Networks

Airgap Networks

Airgap is fixing the fundamental flaw of excessive trust. We help enterprises modernize their network for a simple and secure infrastructure.

NASK

NASK

NASK is a National Research Institute under the supervision of the Chancellery of the Prime Minister of Poland. Our key activities involve ensuring security online.

Praxis Security Labs

Praxis Security Labs

Praxis Security Labs is a research driven cybersecurity company that helps our customers to reduce risk and improve security.

ELK Analytics

ELK Analytics

ELK Analytics is a specialized Managed Security Services Provider (MSSP) that focuses on endpoint security and monitoring & alerting for any type of structured or unstructured data.

Bluecyber Insurance

Bluecyber Insurance

At Bluecyber, we are revolutionizing the cyber insurance market, democratizing access to digital protection for small and medium-sized businesses.