Thursday, March 15, 2012

Messages Sent From Your Smartphone Or Tablet Are .SAFE! The Dot is the Difference.

Messages Sent From Your Smartphone Or Tablet Are .SAFE!
The Dot is the Difference.

Individuals in various fields (i.e., healthcare professionals, legal firms, banks, and among others) are continuously exchanging critical information while on-the-go. Critical information often has a sensitive time component, which means they need to be able to send and receive confidential information with complete security from anywhere in the world. They can now look to Encryptics® data protection software and mobile security solution for answers.

Encryptics® Professional is the easiest and most powerful way to securely create and send sensitive information. Our award winning data protection software solution will secure your content for the lifecycle of the data. Encryptics Professional accomplishes this through a Trusted Peer-to-Peer™ delivery, a multi-layered encryption process with Advanced Digital Rights Management (DRM) options.

Encryptics Professional secures your critical information with our .SAFE™ file format for every message. Your data remains a .SAFE file, staying completely secure on your device, across the pipe, and even on the recipient(s) device.

Our exclusive Advanced DRM tools gives you the power to prevent forward, copy, print, and save. Added features allow for Read Receipt, control over Timeline options, and email recall. These feature enhancements are offered because you authored the content, so you should be able to maintain control over your information even if it’s on someone’s device. Encryptics values your complete control and what you send into the digital realm should always belong to you.

Encryptics has now launched Encryptics® Mobile, an extension of Encryptics Professional. Your messages are now complete with Encryptics Mobile security allowing you to send and receive messages from your iPhone, iPad, Android phone, or tablet. Smartphones are more powerful than any other device because they are always within reach. Manhattan Research found more than 81% of physicians use a smartphone to send information, up from 72% in 2010. In healthcare, the same care given to the patient should also be given to their Protected Health Information (PHI).

Also, legal firms have both ethical and legal responsibilities to protect clients’ confidential data. According to Ponemon Institute, the cost per industry data breach on average is now at $7.2 million, not to mention the organizations’ reputation. Firms can now protect their intellectual property when sending clients’ information using a mobile device.

You can now take advantage of our robust .SAFE file format for all your messages. Encryptics Mobile allows you to send and receive from your iPhone, iPad, Android phone, or tablet. You can ensure your messages will be locked down while you are on-the-go from anywhere in the world.

Posted by Tricia Adams
Encryptics
Marketing Communications Manager

#.SAFE @Encryptics

Ponemon, L. (2011). Cost of a data breach climbs higher. Ponemon Institute, Retrieved from: http://www.ponemon.org/blog/post/cost-of-a-data-breach-climbs-higher.

(2011). Smartphones, Tablets and Mobile Marketing. Manhattan Research, Retrieved from: http://manhattanresearch.com/Research-Topics/Healthcare-Professional/Mobile

Monday, February 27, 2012

Encryptics® Announces New Client, KoonsFuller

Encryptics®, a cybersecurity company that secures digital content for the lifecycle of a document, announces new client, KoonsFuller, one of the nation’s largest law firms specializing in family law cases, with 29 attorneys and offices in four North Texas locations.

Dallas, Texas (PRWEB) February 22, 2012

Encryptics®, a cybersecurity company that secures digital content for the lifecycle of a document, announces new client, KoonsFuller, one of the nation’s largest law firms specializing in family law cases, with 29 attorneys and offices in four North Texas locations.


Encryptics Chief Executive Officer, Brandon Hart, said, “We are pleased to announce the prestigious law firm of KoonsFuller has selected Encryptics to protect their clients’ highly sensitive data. Most companies spend a lot of time and money on anti-virus software, firewalls, and passwords to protect their computer systems from hackers. But increasingly, they are seeing a need to protect their incoming and outgoing emails from security breaches. KoonsFuller is an industry leader in taking steps to ensure client data security.”


Ike Vanden Eykel, KoonsFuller CEO and Managing Partner, is immediate Past President of the Dallas Bar Association, serves on the board of directors of the State Bar of Texas, and is a commissioner of the Texas Equal Access to Justice Commission. Mr. Vandel Eykel said,


“We deal with sensitive and important client information on a daily basis. The security of the information we are sending in email communication is of utmost importance and the protection provided by Encryptics is without equal in the business world.”


In a recent issue of Town & Country magazine (February 2011), Ike Vanden Eykel was the only Texas attorney featured among the nation's 15 most effective family lawyers for wealthy, famous clients. He has been described as the "reigning king" of Texas divorce and the "divorce law Jedi" by The Dallas Morning News (2007) and is counted among the Best Lawyers in Dallas by D Magazine (2011). He is a frequent media commentator, and has authored several books. He has been featured in Texas’ Best Lawyers (2009-2011) as one of the state’s top attorneys.


Visit http://www.koonsfuller.com for more information on the firm.


About Encryptics®


Encryptics is asking, Is Your Data .SAFE?”™


Encryptics® Professional is the first Trusted Peer-to-Peer™ platform on the market. This means digital content never touches Encryptics servers; instead, traveling directly from the author/sender to recipient(s), secured via multiple keys, digital signatures, and hardware fingerprints. This solution can send secure content through email clients, such as Microsoft Outlook™, or send our .SAFE file through Internet-based services including Gmail, Yahoo, AOL, and many more. Encryptics customers’ data is kept .SAFE across multiple communication platforms, without disrupting workflow.


Encryptics won the Best of FOSE Special Judges’ Award at the FOSE (Federal Office Systems Exposition) Show, held July 19-21, 2011 in Washington, D.C. when it was introduced to the government cyber security industry.


To learn more, visit http://www.encryptics.com, call 877.454.7595, or


email support(at)encryptics(dot)com


###


Vicki Young
vicki@theyoungcompany.net
(214) 948-5940
Email Information

Friday, December 23, 2011

Encryptics® Announces Encryptics Pro® Read Receipt Product Enhancement

For Immediate Release
Contact: Vicki Young
(214) 948-5940 voice, (214) 533-1584 cell
(214) 948-6940 fax
vicki@theyoungcompany.net


Encryptics® Announces Encryptics Pro® Read Receipt Product Enhancement

DALLAS–(December 7, 2011)– Encryptics® CEO, Brandon Hart, announced new enhancements to their Encryptics Pro® cyber security software solution. Read Receipt is the first such feature to be introduced.

“Encryptics values an email authors’ control, and provides all authors the ability to know when his or her email is read,” said Hart. “Encryptics Pro Read Receipt, an extension of our Advanced Digital Rights Management (DRM) package, enhances this ability. “Standard read receipts allow an email recipient to choose whether or not to send an email-read receipt to the author of the message. Encryptics Pro Read Receipt delivers the email message to the recipient and, when activated, automatically informs the author through an Encryptics Delivery Receipt that the email has been decrypted and read by the intended recipient. The Encryptics Pro Read Receipt gives authors another level of control over their content.

“At Encryptics, safe delivery of cyber data is our number one priority. We are pleased to announce the first of our Encryptics Pro product enhancements, and look forward to introducing others to our customers in the weeks ahead.”

About Encryptics

Encryptics is a cyber security company that secures digital content for the lifecycle of the document. The Encryptics solution values safe data delivery, author control, and user authentication. Encryptics is critical to the transfer of digital information, including encryption, decryption, and Advanced Digital Rights Management (DRM). Encryptics is the first Trusted Peer-to-Peer® platform on the market. This means the digital content never resides on Encryptics servers; instead traveling directly from the author/sender to the recipient(s) using multiple keys, digital signatures, and hardware IDs during transmission, authentication, and subsequent data storage. In theory, it would require a device that could check a billion billion AES keys per second an estimated 3x10 to the 51st power in years to exhaust the total number of possible options. This solution can send secure content through email clients or Internet-based services including Microsoft Outlook™, Gmail, Yahoo Mail Plus, AOL, and many more. Also, Encryptics is a fully functioning email client that can manage digital communications.

Encryptics won the Best of FOSE Special Judges’ Award at the recent FOSE (Federal Office Systems Exposition) Show, held July 19-21, 2011 in Washington, D.C.

To learn more, visit http://www.encryptics.com, call 877.454.7595, or
email support@encryptics.com
# # #

Encryptics® Announces Encryptics Pro® Timeline Settings Enhancement

For Immediate Release
Contact: Vicki Young
(214) 948-5940 voice, (214) 533-1584 cell
(214) 948-6940 fax
vicki@theyoungcompany.net


Encryptics® Announces Encryptics Pro® Timeline Settings Enhancement

DALLAS–(December 21, 2011)–Encryptics® CEO, Brandon Hart, announced Encryptics® is introducing a new cyber security content timeline settings feature as part of Encryptics Pro®. This feature follows the company’s recent introduction of the Encryptics Pro Read Receipt secured message delivery option.

“Encryptics Pro Timeline Settings gives email authors unprecedented control over their encrypted content,” said Hart.

“The feature allows authors to control several options: Selection of the date when data can be accessed, how long that data can be accessed, and how many times it can be accessed. For instance, the author can state the data can first be opened on a specific date, delay an opening until a specific date, set a date when content will expire, and limit the number of times content can be opened.

“Encryptics Pro Timeline Settings joins our Read Receipt product enhancement. Both are extensions of our Advanced Digital Rights Management (DRM) features, providing authors total control over cyber data. At Encryptics, we’re all about providing Internet security solutions. These two new features are examples of how we are constantly expanding our product to provide our customers the most comprehensive cyber security application in the market.”

About Encryptics

Encryptics is a cyber security company that secures digital content for the lifecycle of the document. The Encryptics solution values safe data delivery, author control, and user authentication. Encryptics is critical to the transfer of digital information, including encryption, decryption, and Advanced Digital Rights Management (DRM). Encryptics is the first Trusted Peer-to-Peer® platform on the market. This means the digital content never resides on Encryptics servers; instead traveling directly from the author/sender to the recipient(s) using multiple keys, digital signatures, and hardware IDs during transmission, authentication, and subsequent data storage. In theory, it would require a device that could check a billion billion AES keys per second an estimated 3x10 to the 51st power in years to exhaust the total number of possible options. This solution can send secure content through email clients or Internet-based services including Microsoft Outlook™, Gmail, Yahoo Mail Plus, AOL, and many more. Also, Encryptics is a fully functioning email client that can manage digital communications.

Encryptics won the Best of FOSE Special Judges’ Award at the recent FOSE (Federal Office Systems Exposition) Show, held July 19-21, 2011 in Washington, D.C.

To learn more, visit http://www.encryptics.com, call 877.454.7595, or
email support@encryptics.com

Encryptics® Announces Encryptics Pro® Email Recall

For Immediate Release
Contact: Vicki Young
(214) 948-5940 voice, (214) 533-1584 cell
(214) 948-6940 fax
vicki@theyoungcompany.net


Encryptics® Announces Encryptics Pro® Email Recall

DALLAS–(December 22, 2011)–Encryptics® CEO, Brandon Hart, announced Encryptics® is introducing a new Email Recall cyber security product feature as part of Encryptics Pro®.

“Have you ever sent an email to the incorrect member of an organization, or a person no longer employed with the organization? Or the recipient’s device has been compromised and you want to protect your data?” said Hart. “The Encryptics Pro Email Recall feature allows authors to take those emails back. Simply select the email in your sent items folder, open it, and select recall. Easy. Once the author recalls the email, the recipient will no longer have access to the data. Think of it as an Un-Send button.

“The Encryptics Pro Email Recall feature joins the recently announced Encryptics Pro Read Receipt and Encryptics Pro Timeline Settings. All three new features are extensions of our Encryptics Pro Advanced Digital Rights Management (DRM) package, providing authors unprecedented control over cyber data.

“Every day, cyber security becomes more of an issue in today’s consumer, business, and political arenas. And Encryptics is dedicated to constantly expanding our customers’ abilities to control all transmissions of their sensitive data.”

About Encryptics

Encryptics is a cyber security company that secures digital content for the lifecycle of the document. The Encryptics solution values safe data delivery, author control, and user authentication. Encryptics is critical to the transfer of digital information, including encryption, decryption, and Advanced Digital Rights Management (DRM). Encryptics is the first Trusted Peer-to-Peer® platform on the market. This means the digital content never resides on Encryptics servers; instead traveling directly from the author/sender to the recipient(s) using multiple keys, digital signatures, and hardware IDs during transmission, authentication, and subsequent data storage. In theory, it would require a device that could check a billion billion AES keys per second an estimated 3x10 to the 51st power in years to exhaust the total number of possible options. This solution can send secure content through email clients or Internet-based services including Microsoft Outlook™, Gmail, Yahoo Mail Plus, AOL, and many more. Also, Encryptics is a fully functioning email client that can manage digital communications.

Encryptics won the Best of FOSE Special Judges’ Award at the recent FOSE (Federal Office Systems Exposition) Show, held July 19-21, 2011 in Washington, D.C.

To learn more, visit http://www.encryptics.com, call 877.454.7595, or
email support@encryptics.com
# # #

Thursday, December 1, 2011

SSL Not Suitable For Today’s Internet Use: Understanding The Latest Attack Vectors

SSL Not Suitable For Today’s Internet Use: Understanding The Latest Attack Vectors

The issue involves the web’s security certificate system, known as SSL (Security Sockets Layer). Specifically, the ‘https:’ address and padlock symbol indicates that data transmitted from that particular site will be encrypted, and the site provides a legitimate security certificate validating it really is owned by the person or organization the website claims. Additionally, the web’s security indicates the certificate is checked by a third-party authority as well.

The problem is that both the SSL encryption and certificate verification are carried out with a mathematical algorithm and a series of calculations. Some of the authorities that check certificates still use an algorithm named MD5 which involves a password of 32 letters or numbers, making the password vulnerable and easy to crack. Other cryptographers began recommending the use of alternative algorithms, such as SAH-1, SHA-2, and SHA-3 to replace MD5’s security flaws, but were also established to be just as vulnerable.

Today, businesses still rely on browser-based SSL as the standard to secure data exchanges. SSL was never meant to handle complex security needs for the web services environment, however, enterprises are consistently relying on the unsecured solution. According to researchers the standard SSL (i.e., 128, 256, 1024, 2048-bit solution) in web service applications are not secure enough for today’s powerful modern computing and Internet use. While SSL seemed suitable in the past, security experts say SSL alone is not adequate for current data exchanges due to an increase chance of forging security certificates. Corporations utilizing this security are exposing their sensitive data to theft as information lies vulnerable on the web and application servers.

Encryptics Professional (Pro) solution versus the standard SSL protects the encrypted content for the lifecycle of the document. The Encryptics solution values safe data delivery, author control, and user authentication. Encryptics is critical to the transfer of digital information, including encryption, decryption, and Secure Content Management (SCM). Encryptics is the first Trusted Peer-to-Peer® platform on the market. This means the digital content never resides on Encryptics servers; instead traveling directly from the author/sender to the recipient(s) using multiple keys, digital signatures, and hardware IDs during transmission, authentication, and subsequent data storage. In theory, it would require a device that could check a billion AES keys per second an estimated 3x10 to the 51st power in years to exhaust the total number of possible options.

According to Mr. Misha Glenny, a British journalist, who released a book reporting the history of a famous hacker forum stated, “Regardless of how much money governments and corporations spend on upgrading computer security, the war on cybercrime cannot be won without mastering the psychology of its practitioners.” Encryptics Pro has mastered the mindset of true cyber security by providing a horizontal solution not limited to specific verticals. Every message sent with Encryptics Pro is so secure it’s beyond the reach of any data thief. That’s Security. Control. Peace of mind.

Tuesday, November 22, 2011

Encryptics® Announces Board of Advisors Paul Goldenberg to serve as Chairman

For Immediate Release
Contact: Vicki Young
(214) 948-5940 voice, (214) 533-1584 cell
(214) 948-6940 fax
vicki@theyoungcompany.net

Photo Caption: Paul Goldenberg, Chairman, Encryptics® Board of Advisors

Encryptics® Announces Board of Advisors
Paul Goldenberg to serve as Chairman

DALLAS–(November 29, 2011)–Encryptics® CEO, Brandon Hart, today announced the company’s Board of Advisors. Paul Goldenberg, a former highly decorated criminal justice executive and advisor in national security will serve as Chairman.

“We are pleased to announce our founding Board of Advisors, and Paul Goldenberg as Chairman,” Hart said. “Encryptics has reached out to various members of the business and government communities to leverage their knowledge and experience to help us develop and deliver the very best products in our industry. It’s exciting, and unusual, for a relatively new company to have such a prestigious group of thought leaders guiding us.”

Goldenberg is currently President/CEO, Cardinal Point Strategies. He has built a distinguished career as a highly decorated criminal justice executive with extensive and broad-based experience in a wide variety of high profile and politically sensitive government and NGO environments. He is well known for his record of resolving high profile and confidential matters for governments and international human rights organizations.

In February 2010, U.S. Department of Homeland Security Secretary, Janet Napolitano, appointed Mr. Goldenberg to the President’s Homeland Security Advisory Council’s Countering Violent Extremism Working Group.

In 2005, Mr. Goldenberg was instrumental in the design and development of the Secure Community Network, the first-ever faith-based homeland security information sharing center in the United States, and now serves as National Director representing 52 major religious organizations in the United States.

Mr. Goldenberg currently acts as senior advisor and director of Homeland Security for the County Executives of America. He has spoken globally on the subject of counter terrorism, extremism, and community conflict. Currently, Mr. Goldenberg acts as senior law enforcement policy advisor for many of the nation’s largest human rights organizations.

Throughout the 1980’s Mr. Goldenberg served as special agent in an undercover capacity as part of the elite and renowned South Florida Organized Crime Strike Force.

Encryptics Board of Advisors:
Chairman, Paul G. Goldenberg, President/CEO, Cardinal Point Strategies
Dr. Stockton Gaines, Founder and Executive Vice President, Acorn Technologies, Inc.
General Paul V. Hester, U.S. Air Force (Retired January 2008)
Jessica Herrera-Flanigan, Partner, Monument Policy Group
Robert P. Liscouski, Partner, Secure Strategy Group, LLC
Max E. Toy, Principal, Inforium Corporation, Strategic Consultant
Major General James L. Williams, USMC (retired August 2010)

About Encryptics

Encryptics is a cyber security company that secures digital content for the lifecycle of the document. The Encryptics solution values safe data delivery, author control, and user authentication. http://www.encryptics.com, call 877.454.7595, or support@encryptics.com

Thursday, November 17, 2011

U.S. Congressman Sam Johnson Visits Encryptics(R)


U.S. Congressman Sam Johnson Visits Encryptics(R)
U.S. Congressman, Sam Johnson visited the Encryptics headquarters on Friday, October 21st to welcome the company to his district.
Email PDF Print .Dallas, Texas (PRWEB) November 03, 2011

U.S. Congressman, Sam Johnson visited the Encryptics® headquarters on Friday, October 21 to welcome the company to his district. Johnson represents Texas in the 3rd District which includes Northern Dallas and Southern Collin counties, including Dallas and Frisco where Encryptics headquarters are located. The company moved their offices to Frisco in July, 2011.

Congressman Johnson said he enjoyed his visit, “It is great to welcome a company like Encryptics to the Thrid District of Texas. I was very impressed with the company, and look forward to hearing their continued success stories.”

Johnson, a decorated war hero and native Texan, ranks among the few Members of Congress to fight in combat. He told the gathered employees of Encryptics tales of his 29-year career in the U.S. Air Force. Representative Johnson flew combat missions in both the Korean and Vietnam Wars. He endured nearly seven years as a Prisoner of War in Hanoi, including 42 months in solitary confinement. Following his distinguished military career, he built a home construction business in North Dallas from scratch and served in the Texas State legislature. His autobiography, "Captive Warriors," chronicles his POW experience. Today, Johnson holds a House leadership role as one of the few Deputy Whips (vote counters).

Encryptics CEO, Dennis Cagan, said, “It was a great honor to have Congressman Johnson visit our company and speak with us. We are deeply grateful for the opportunity to have spent time with a true American hero.”

Encryptics is a Trusted Peer-to-Peer® platform for the safe delivery of digital information via email. The Encryptics application is critical in the encryption, decryption, Digital Rights Management (DRM), and Digital Signature process. Other encryption applications are server-based. The Encryptics email encryption application is the first trusted peer-to-peer option on the market. This means the email content never resides on Encryptics servers; instead it travels directly from the author/sender to the recipient(s) using multiple keys, digital signatures, and hardware IDs during transmission and authentication. In theory, it would require a device that could check a billion billion AES keys per second about 3x10 to the 51st power in years to exhaust the total number of possible keys. Encryptics can send encrypted emails through email clients or Internet-based services including Microsoft OutlookTM, Gmail, Yahoo Mail Plus, AOL, and many more. Also, Encryptics is a fully functioning email client that can manage all email communications.

Encryptics won the Best of FOSE Special Judges’ Award at the recent FOSE (Federal Office Systems Exposition) held July 19-21, 2011 in Washington, D.C. To learn more, visit http://www.encryptics.com, call 877.454.7595, or support(at)encryptics(dot)com.

Thursday, October 20, 2011

Email Phishing Scams: Don’t Let This Happen On Your Clock

Email Phishing Scams: Don’t Let This Happen On Your Clock

Privacy is an important concern across every organizational sector, and cyber-attacks are not limited to specific verticals. We use locks on our doors, alarms on our buildings, and firewalls on our networks, but often overlook one of the simplest and most used entry points to our intellectual property and sensitive data – email.

Cyber-attacks are the new battle front and threats continue to grow exponentially. Criminals continue to execute cyber-threats in a variety of ways: whether it’s through data leakage, resource depletion, injection attacks, RSA spear phishing, email phishing, email spying, spoofing, or server hacking. The potential for attacks against data are as likely as terrorist attacks against infrastructure.

The financial service industry is the most targeted sector for email phishing and regularly absorbs more than 50% of all such attacks. According to Gartner, a leading global IT researcher, more than five million United States consumers suffered financial losses due to phishing scams in 2008 alone. The average loss was approximately $351 per consumer affected. Security provider M86 revealed that 1-2% of all mail is phishing related, and United States businesses lose an estimated $2 billion each year, as their clients become victims. Not only do organizations lose money, government agencies and corporate reputations are at risk. As Internet fraud continues to rise and new schemes emerge, customer confidence is in decline.

Phishing is a method of acquiring sensitive information during digital communications (i.e., usernames, passwords, social security #s, military information, etc.) through misrepresentation as a trustworthy entity. A phisher could pose as a staff member and send a message to a potential victim, asking the victim to reveal their password. In order to lure the victim into giving up sensitive information, the message might include the following information, “verify your account” or “confirm billing information.” Once the victim reveals the password, the attacker could access and use the victim’s account for fraudulent purposes or spamming. Some phishing emails even threaten a consequence if you don’t respond. The messages will direct you to a website that looks like a legitimate organization. This bogus site tricks you into revealing your personal information.

While there is a breadth of cyber-crime knowledge in recent legislation and news, email phishing is a common, recurring attack. It’s critical to understand the latest attack vectors, how they escalate, as well as the significance of security implementation for your organization.

Email spoofing is another form of a cyber-attack. Spoofing involves the forgery of an email header, so that the message appears to have originated from someone else. Distributors of spam often use spoofing in an attempt to get recipients to open, and possibly even respond to, their solicitations. Typically, phishing and spoofing criminals will steal your identity, money, and passwords to accounts by pretending to be from a legitimate retailer, bank, or government agency. The attacker will ask to “confirm” your personal information for some made-up reason: Your account is about to be closed, an order for something has been placed in your name, or your information has been lost because of a computer problem.

Spear phishing is a part of email spoofing fraud attempts that targets a specific organization, seeking unauthorized access to sensitive data. Spear phishing attempts are not typically initiated by random hackers, but are more likely to be conducted by perpetrators out for financial gain, trade secrets, or military information. As is the case in all the examples above, spear phishing messages appear to come from a trusted source. These messages usually appear to come from a large and well-known company or website with a broad membership base, such as eBay or PayPal.

In efforts to avoid phishing scams, Encryptics Professional (Pro) provides an impenetrable fortress around every digital transmission. The user is now able to operate without the fear of getting hacked by utilizing Encryptics horizontal solution.

Encryptics protects data at rest, data in transit, and all points in between through the first Trusted Peer-to-Peer(TM)delivery platform on the market. Encryptics provides True Digital Rights Management (DRM), as well as our multi-layered encryption process. You can now send and receive secure email from anywhere in the world, without the restrictions of a closed private network, and be confident that only the intended recipients will be able to view your message and any attachments.

Wednesday, October 12, 2011

IT Security & Network Security News: Federal Network Security Breaches Jump 650% in Five Years

The latest Government Accountability Office report underscored how poorly equipped federal departments and agencies are to prevent network security breaches.

Security incidents at federal agencies have soared 650 percent over the past five years, according to a report from the Government Accountability Office.

In the past five years, the number of reported events has grown from 5,503 in 2006 to 41,776 in 2010, federal auditors wrote in a Government Accountability Office report released Oct. 3. The GAO compiled the report based on information from security-related reports and data from 24 federal agencies and departments that were collected between September 2010 and October 2011.

Nearly 30 percent of incidents involved malware infections, making it the most prevalent cyber-event, the report found. Other common issues included violations of acceptable use policies and intrusions into networks, applications and other data resources.

"Of the 24 major agencies, none had fully or effectively implemented an agency-wide information security program," Gregory C. Wilshusen, GAO director for information security issues, wrote in the report.

Agencies are vulnerable to cyber-attack and other security issues because they have failed to implement proper security controls, GAO auditors wrote. Agencies do not always adequately train system security personnel, regularly monitor safeguards, fix vulnerabilities or resolve incidents in a timely manner when they do occur, according to the report. These problems leave the departments vulnerable to both external and internal threats, Wilshusen said.

"As long as agencies have not fully and effectively implemented their information security programs, including addressing the hundreds of recommendations that we and inspectors general have made, federal systems will remain at increased risk of attack or compromise," wrote Wilshusen.

The audit found that the Internal Revenue Service does not block employees from accessing databases not required for their jobs. As a result, financial and taxpayer information "remain unnecessarily vulnerable" to insider threats. The fact that any employee has access to the systems means there is an increased risk of "unauthorized disclosure, modification or destruction," the report said.

Another incident involved a network user who clicked on a malicious link in an email. The employee was told he'd won a new car in a lottery he'd supposedly entered when he answered some questions on a survey about his pets. The employee discovered later that several credit cards had been opened in his name and large amounts of pet supplies ordered without his knowledge, according to the report.

The GAO periodically updates Congress on how well federal departments are complying with the 2002 Federal Information Security Act. FISMA is supposed to help federal departments and agencies define security policies, conduct security awareness training and implement proper surveillance of computer safeguards. Under the law, passed in 2002, every agency in the federal government has to have information security programs and plans for managing risks in place.

This is not the first time in recent months the GAO has called out departments on lax information security. In an August report, the GAO issued an audit report of the Federal Deposit Insurance Corporation that showed the FDIC did not use strong passwords, review user access and failed to encrypt sensitive financial information. The August GAO report found weaknesses in FDIC controls that are supposed to manage system configurations, deploy patches and segregate certain network activities.