DHS issued a binding operational directive in September that requires agencies to discontinue the use of Kaspersky’s anti-virus platforms in their systems within 90 days due to the companyâs potential ties to the Russian government.
Manfra told House Science Committee members Tuesday that those agencies gained access to Kaspersky software through a package of digital security services.
She noted that about 94 percent of agencies were able to comply with the October deadline to screen their networks for the software and develop a plan to facilitate the removal of the tool from their systems.
Manfra also fielded questions from Rep. Lamar Smith (R-Texas), chairman of the House panel, on whether DHS has enough evidence that vulnerabilities in Kasperskyâs software have been exploited to compromise data in civilian agency networks.
âI want to do a thorough review to ensure that we have the full picture,â Manfra added.