[Lazamataz]

I’ve not worked for government IT, but I work with several professional who have; and I can confirm that in the non-security-based portions of our government domains (i.e. NOT CIA, FBI, NSA, etc.), the security controls are severely lacking.

Not over here they're not.

[rarestia]

That’s good to hear, Laz. I’ve heard otherwise depending on the agency.

[driftdiver]

Laz, I did work for one department. Deplorable security and after I delivered the gap analysis and list of what they needed the sensitivity of the data was downgraded (rather then increasing security) to meet standards.

So some are in good shape, many are not. Regardless all are a target and ALL will be hacked.