How are you spending time at your PC?

Employees at the US Department of the Interior (DOI) spend significant time on sexually explicit and gambling Web sites and even more time shopping and playing online games while at work, according to a report released this week.

Employee time spent at Internet auction and gaming sites cost the agency anestimated 104,221 hours in lost productivity in a year, according to the report, released by the agency's Office of Inspector General. The estimated cost in lost productivity to the DOI is more than $2 million a year, the inspector general's report said.
In reviewing one week of computer-use logs at DOI, the inspector general found more than 4,700 log entries to sexually explicit or gambling Web sites, which are prohibited in the DOI's Internet use policy. In addition, the inspector general found more than 1 million log entries from 7,763 DOI employees who accessed online gaming and auction sites, the report said.

The continued access to porn and gambling sites is "due to a lack of consistency in department controls over Internet use," Earl Devaney, DOI inspector general, wrote in the report.

Surfing porn and gambling sites not only wastes time but also could expose the agency's computers to malware such as viruses or keystroke loggers, says Yuval Ben-Itzhak, chief technology officer of Web security firm Finjan. Porn and gambling sites "usually are the first ones to distribute malicious code," he says.
A DOI spokesperson didn't immediately return a phone call seeking comment on the report. The agency sent a memo to all employees last week, reinforcing its Internet use policy.

The DOI, the agency that focuses on protecting US natural resources, does not expressly prohibit employees from going to online auction and gaming sites, the report said.

One employee computer had spent close to 14 hours at two Internet gaming sites during the week, another had spent about 12 hours at one gaming site, and a third had spent nearly 10 hours at a gaming site, the report said.

Despite three recent cases in which child pornography was found on DOI employees' computers, the agency has no systemwide infrastructure for Internet monitoring and blocking, the report said. Four of the agency's six bureaus surveyed in the report are using monitoring and blocking software programs "to varying degrees and with some success," the report said.

In the Bureau of Reclamation, the value of the blocking and monitoring software is "questionable," the report said. The inspector general found 148 computers in the bureau that had accessed sexually explicit Web sites during the week.
In the DOI's Office of Surface Mining, Internet-use reports are apparently generated only when a supervisor requests one, "rendering the system useless for any real proactive measures," the inspector general said.

The DOI has taken only 177 disciplinary actions against employees for inappropriate Internet use since 1999, the report said. "The low number of disciplinary actions reportedly taken... compared to the thousands of hits we found indicating user activity at inappropriate sites suggests that employees are not being held accountable," the report said.

The DOI should develop a unified approach to address inappropriate Internet use, including a more consistent use of disciplinary action, the inspector general recommended. — Agencies