So is implying that presence of Windows means a network is not secure, or that all it takes to secure a network that uses Windows is AV or anti-spyware, or that using OSX or Linux is inherently secure.

The networks we are talking about a enormous. If you want an idea of the scope just Google NMCI and do some reading. Securing networks of this size, and still allowing the users to get their work done, is not a simple task. I'm saying that the state of IA in the .gov is excusable. I am just saying that it is not a simple issue that can be resolved switching to an OSS/Linux solution or ensuring AV/AS is installed on all Windows computers.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/438/1777#1777