Report: Computer crime unit suffers from lack of staff, expertise

From Jack Date
CNN Justice Producer

WASHINGTON (CNN) -- An anti-cyberterrorism unit operating within the FBI is failing to provide timely warnings of computer attacks, according to a government report released Tuesday.

The report cites a lack of staff and expertise at the National Infrastructure Protection Center for the alleged shortcomings.

"While some warnings were issued in time to avert damage, most of the warnings, especially those related to viruses, pertained to attacks under way," reads the report from the General Accounting Office, an investigative arm of Congress.

The report said the NIPC, an inter-agency center operating within the FBI, did provide valuable support to computer investigations conducted by the FBI.

	MESSAGE BOARD
Security on the Net

However, the report added that "insufficient computer capacity and data transmission capabilities are limiting the NIPC's ability to perform technical analyses promptly." The report said an inadequate computer system resulted in a 30-day backlog in analysis requests.

NIPC is supposed to work with the Secret Service, which investigates computer- related fraud, but as of December 21, 2000, the report said, no Secret Service personnel were assigned to NIPC.

In terms of staff shortages, the report said the center operated with 13 analysts when it needed 24.

Bureaucratic resistance may be inhibiting NIPC's functions.

"NIPC operates in a milieu of federal agencies and for-profit entities that feel the NIPC threatens their resources or authorities," Ron Dick, the center's director, said in a response written on FBI letterhead published in the report. "Many of those upon whom the NIPC relies to accomplish its mission might prefer that the NIPC, especially housed in the FBI, not succeed."

Computer-related crimes have surged in recent years. The number of new FBI computer crime cases more than doubled to more than 1,100 between 1998 and 2000.

The report comes as the FBI is embroiled in several high-profile controversies, including the late discovery of FBI documents related to the Oklahoma City bombing investigation, which resulted in the postponement of Timothy McVeigh's execution.

The February arrest of Robert Hanssen, an FBI agent accused of spying for the Soviet Union and later Russia, badly damaged FBI morale. Both cases have raised questions about FBI management and its ability to police itself.

NIPC was created under a presidential directive in February 1998 and operates within the FBI and in association with other agencies and the private sector. Its mission is to warn, assess, investigate and respond to attacks and threats against eight critical infrastructure areas including telecommunication, energy, banking, water and emergency systems.

The GAO report was commissioned by Sen. Jon Kyl, R-Arizona, chairman of the Senate Judiciary Subcommittee on Technology, Terrorism and Government Information.