Direct to GAO Statement
In providing health care and other benefits to veterans, the VA relies extensively on its IT systems and networks to maintain sensitive data—such as veterans’ medical records.
However, we testified that the VA (like many other federal agencies) continues to face several IT security challenges as it secures and modernizes its systems.
These challenges include:
- Effectively safeguarding its sensitive information by implementing information security controls
- Addressing known vulnerabilities
- Accurately identifying critical cybersecurity staffing needs
- Managing risks in its IT supply chain
