GAO: OPM CIO David DeVries says auditors paint incomplete picture of agency’s cybersecurity posture. GAO says OPM’s procedures for overseeing the security of its contractor-operated systems failed to ensure that controls were comprehensively tested. CIO: “OPM recognizes that cybersecurity is not just about technology, but is also about people” CIO says agency has added cybersecurity tools and security updates, staff and agency-wide training, hiring critical personnel and collaborating with interagency partners.”]
Source: https://www.cuinfosecurity.com/opm-cio-fires-back-at-gao-over-cybersecurity-audit-a-10167