The real issue surrounding the OPM breach has not been discussed in the thousands of sentences of commentary written about the hack. The problem isn’t the lack of security standards, but the fact that the existing collection of commercial hardware, firmware and software employed to provide IT services contain inherent design and implementation vulnerabilities. The only solution to this dilemma is to raise the “trustability” level of our computer systems high enough to make even sophisticated hacking riskier. As they say in the military: Reduce the attack surface.”]
Source: https://www.databreachtoday.com/blogs/preventing-another-opm-type-breach-p-1886