Like Dept of Energy, DOJ, and State, SWIFT not using strong authentication. https://www.emptywheel.net/2015/08/01/department-of-energy-cybersprinting-backwards/ …https://twitter.com/RosenzweigP/status/736609269781565440 …
That (showing DOJ near bottom for strong auth) used last year's FISMA report but still problem in Nov. https://www.emptywheel.net/2015/11/16/doj-still-gets-a-failing-grade-on-strong-authentication/ …