USPS OIG Report: Legacy Systems at the U.S. Postal Service

Background The U.S. Postal Service performs a variety of operations, dependent on its vast information technology infrastructure. This infrastructure encompasses 761 systems that the Postal Service strives to maintain and secure from network attacks. In support of the Delivering for America plan, the Postal Service plans to invest in modernizing and enhancing cybersecurity technologies, but it is still…

 Continue reading

Postal Bulletin: Protecting USPS Networks

When plugging a smart mobile device (e.g., phone, tablet, or wearable technology) into a computer’s USB port, the two devices can exchange information or malware.1 At the United States Postal ServiceÂź, this could put sensitive information into the wrong hands and potentially affect our business and reputation. To prevent a security breach, follow these important…

 Continue reading

USPS urges increased cybersecurity vigilance amid Mideast tensions

USPS is requiring employees, contractors and others to demonstrate increased cybersecurity vigilance amid escalating tensions in the Middle East. Email spearphishing campaigns targeting U.S. government agencies are intensifying, the Postal Service Corporate Information Security Office reports. Cyberthreat actors are aggressively attempting to steal sensitive information, including account credentials and financial information, using targeted information campaigns….

 Continue reading

Postal Bulletin: Staying Safe in the New Cyber Frontier

Welcome to the New Cyber Frontier: What You Need to Know to Stay Safe The world changes fast, yet technology evolves even faster. While technology today provides great benefits such as being able to conduct business on the go, it also creates more risks. Cyber threats, which are criminal or unethical activities that take place…

 Continue reading

USPS: Charging smartly – Safety tips for personal devices

The Postal Service is reminding employees that plugging smartphones, unapproved thumb drives, e-cigarettes and other personal devices into USPS computers violates the organization’s security policies. Plugging unauthorized devices into postal equipment runs the risk of inadvertently transferring malicious software, which could disable computers and allow hackers to gain access to the organization’s network. To protect…

 Continue reading

USPS OIG: Cybersecurity Decision Analysis Reports Review

Objective Our objective was to assess whether Decision Analysis Reports (DAR) I and II cybersecurity investments’ stated performance metrics aligned with the Corporate Information Security Office (CISO) strategic and cost objectives. To establish a sound cybersecurity foundation, the Postal Service has made significant investments in information security. In 2015, the Postal Service approved [redacted] million…

 Continue reading

Postal Bulletin features an update on USPS cybersecurity efforts

At work, each of us conducts official business on behalf of the Postal Service™; however, vigilance doesn’t stop once we’re off the clock. In an increasingly connected world, USPSÂź employees must incorporate cybersecurity best practices at all times, whether we are at home or on the go. For National Cyber Security Awareness Month (NCSAM), the…

 Continue reading

Is USPS’ Informed Delivery feature a new target for security threats?

By C.J. Lovelace – November 25, 2017 The holiday season means a significant increase in mail as millions upon millions of letters and packages move through the U.S. Postal Service system en route to their destinations. For years, the postal service has taken digital photographs of mail as it moves through sorting facilities, helping make…

 Continue reading