Comment Working in the DoD (Score 1) 125
I can attest first had why the DoD has failed security tests.
I am an electronics technician in the Navy, and as one of my collateral duties I play network administrator, the actual administrator is not to knowledgable to be kind. The reason that I say 'play' is that my main job is to make sure that all of my HF/UHF/SHF radios are maintained and all working, this takes priority over everything else, I have to fit administration in on the side.
The rating in the navy that would actually be responsible for the computers would be the information technicians. The problem is, is that most of them don't know how to operate a computer, let alone administer one. The school that they send the network administrators to is a 3 month crash course in basic computers and very basic administration, then they come straight to their network admin job and become in charge of the whole network. The organization of the military, unfortunately allows for people to be in charge of something that they know nothing at all about.
When I came to my current command, the person running the network had used his first computer 6 months prior, needless to say the network was administered horrible. None of the computers had virus scanners (or had one, but it was disabled and never updated). Most of the passwords used were something that could be guessed using a very basic dictionary. Luckily we were behind a pretty good firewall, managed somewhere else by someone who knew what they were doing.
This network that I am speaking of is for unclassified information. The network that is for classifications above that is set up pretty good, and uses some pretty advanced technology to guarentee that nobody can snoop in. Although like any computer, if you have access to the local machine, you can get anything you want off it.