Study: U.S. agency workers surf for porn, gambling
Employees at the U.S. Department of Interior (DOI) spend significant time on sexually explicit and gambling Web sites and even more time shopping and playing online games while at work, according to a report released Wednesday.
Employee time spent at Internet auction and gaming sites cost the agency an estimated 104,221 hours in lost productivity in a year, according to the report, released by the agency's Office of Inspector General. The estimated cost in lost productivity to the DOI is more than US$2 million a year, the inspector general's report said.
In reviewing one week of computer use logs at DOI, the inspector general found more than 4,700 log entries to sexually explicit or gambling Web sites, which are prohibited in the DOI's Internet use policy. In addition, the inspector general found more than 1 million log entries, from 7,763 DOI employees who accessed online gaming and auction sites, the report said.
The continued access to porn and gambling sites is "due to a lack of consistency in department controls over Internet use," DOI Inspector General Earl Devaney wrote in the report.
Surfing porn and gambling sites not only wastes time, but it also could expose the agency's computers to malware such as viruses or keystroke loggers, said Yuval Ben-Itzhak, chief technology officer of Web security firm Finjan Inc. Porn and gambling sites "usually are the first ones to distribute malicious code," he said.
A DOI spokeswoman didn't immediately return a phone call seeking comment on the report. The agency sent a memo to all employees last week, reinforcing its Internet use policy.
The DOI, the agency that focuses on protecting U.S. natural resources, does not expressly prohibit employees from going to online auction and gaming sites, the report said.
One employee computer had spent close to 14 hours at two Internet gaming sites during the week, another had spent about 12 hours at one gaming site, and a third had spent nearly 10 hours at a gaming site, the report said.
Despite three recent cases in which child pornography was found on DOI employees' computers, the agency has no system-wide infrastructure for Internet monitoring and blocking, the report said. Four of the agency's six bureaus surveyed in the report are using monitoring and blocking software programs "to varying degrees and with some success," the report said.
In the Bureau of Reclamation, the value of the blocking and monitoring software is "questionable," the report said. The inspector general found 148 computers in the bureau that had accessed sexually explicit Web sites during the week.
In DOI's Office of Surface Mining, it appears that Internet use reports are generated only when a supervisor requests one, "rendering the system useless for any real proactive measures," the inspector general said.
The DOI has taken only 177 disciplinary actions against employees for inappropriate Internet use since 1999, the report said. "The low number of disciplinary actions reportedly taken ... compared to the thousands of hits we found indicating user activity at inappropriate sites suggests that employees are not being held accountable," the report said.
The DOI should develop a unified approach to address inappropriate Internet use, including a more consistent use of disciplinary action, the inspector general recommended.
IDG News Service
Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world
Brian Proffitt
Microsoft/Novell: Breaking Down the Coupon Numbers
Esther Schindler
Drupal's Dries Buytaert on Building the Next Drupal
Tom Henderson
Top Ten General Operating Systems Rants
pasmith
PS3 motion controller delayed; goes up against Project Natal
sjvn
Neolithic Windows security hole alive and well in Windows 7
claird
Perl source code comparison makes for good reading
mikelgan
Cell phones don't create stress or interrupt much
Sandra Henry-Stocker
How to: The Unix Interview
Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
- Ubuntu advances: Why Ubuntu server installations will surge in 2010
- Social media marketing: How to make friends with benefits
- More...
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.






