Cyber-security an ongoing problem at EPA, investigation finds

Computers at the Environmental Protection Agency are still unsecured, said the Government Accountability Office, noting that the agency has not controlled who has access to sensitive computers and information.

The EPA has failed to encrypt some sensitive data and doesn't always require users to have complex passwords to access information.  The report also found that security patches on many computers were outdated.

The report comes only a few days after a previous investigation found lax cyber-security in the EPA's Region 6, which covers states in the southern U.S.