Guest Post from CAPT Marshall Lytle , Acting CG-6/CIO
On Thursday, June 4th, the C4IT Service Center deployed a series of computer security setting updates associated with Image 6.0. Updates like these are issued periodically by DISA and commercial software providers to address vulnerabilities or risks. Compliance with the updates is required in order for the Coast Guard to maintain its network accreditation with the Department of Defense. One of the modifications contained in this update required us to disable RSS or "Really Simple Syndication" feeds in Outlook2007. This means that those of us who subscribe to RSS feeds from blogs or other news sources, will not be able to receive them via the Outlook2007 RSS feed reader.
Why did RSS feeds have to be shut off? What was the risk? These feeds come to us in a format that allows attachments, graphics and links that can contain code and other malicious actions that are invisible to the user. This is called by the IT security world an "Attack Vector"; an avenue where the bad guys can gain access and take advantage of our information and people through our networks. While we certainly want to be able to work smarter, we also need to provide a safe place to work as well.
This unfortunate action restricts our ability to fully exercise and exploit one of the benefits of Web 2.0 capabilities that I believe is so important to our organization; important because it provides a collaborative and transparent environment for us to better perform our jobs and keep abreast of what's happening. A key aspect of our new CG Portal and Image 6.0 combination is the ability to stay up to date on CG information via RSS.
Although we have complied, I have asked the C4IT Service Center to aggressively pursue several avenues for secure reinstatement of RSS feed capability, as well as looking at alternative methods to deliver these types of feeds.
For more information on RSS feeds.
