U.S. Congress must re-examine its IT infrastructure after the attack

Even in the office of Speaker of the House Nancy Pelosi, one computer was left unlocked, with the contents of the Outlook account openly available for anyone to view. Although it is unlikely that classified data are processed on these computers, the information stored there is surely of great interest to political opponents or intelligence services. It can be assumed that many more computers were similarly vulnerable.

It is also incomprehensible that the screens did not automatically lock after a brief period of inactivity. IT managers can enforce automatic locking by integrating it into group guidelines. This is basically a standard procedure in IT security.

Already on the evening of the day of the attack, police reported that the building had been secured. Debate on the certification of the election victory of future President Joe Biden, which is ordinarily a mere parliamentary formality, was concluded successfully late that night. But the cleanup of the Capitol’s IT systems will take much longer. “After unlocked computers were found, the congressional network should be regarded as having been compromised,” Gierow says. “All computers should be thoroughly analyzed and rebooted. If the scrutiny discovers that systems have been successfully accessed, they must be replaced.” After all, it cannot be ruled out that agents of intelligence agencies infiltrated the mob, hoping to take advantage of the chaos to gain access to intelligence-relevant data.

The ongoing debates about alleged election fraud, Russian interference in U.S. democratic processes, and the lessons learned from leaks of former presidential candidate Hillary Clinton’s emails show that confidence has weakened in key elements of the rule of law. Numerous measures are necessary to rebuild this trust. One essential measure is a precise reappraisal of the security problems that have now become obvious, also in the IT sector.