Report Breaks Down VA Security Lapse

Opfer's report concluded that "the employee used extremely poor judgment." But it also pointed out that VA managers knew little about the employee's work. "It was not clear who actually supervised him," the report said.

· The VA failed to quickly determine the scope of the problem.

Two days after the theft, a VA information security officer interviewed the employee. He found the employee "flustered" and "going in so many directions he could not take good notes." The officer told the employee to provide an account in writing.

When later questioned about the case, the officer said, "I'm not an investigator. I'm a computer tech guy that has a job."

Once the officer got the employee's statement, he drafted a "white paper on lost data" that he e-mailed to Dennis Duffy , a career federal manager, and Michael McLendon , a political appointee. McLendon rewrote the employee's report and, without consulting the employee or a programming expert, incorrectly said that a statistical software program would make it difficult to access the data.

No one on the senior staff ever followed up and interviewed the employee.

· Office politics probably got in the way of an orderly response.

McLendon did not inform Duffy, his supervisor, when he learned of the theft. "Mr. Duffy said that Mr. McLendon had a very strong belief that, as a political appointee, he reported in some fashion to the secretary and that there was no need for a 'careerist' to supervise him. Mr. McLendon characterized the office as one of the most dysfunctional organizations in VA, and that it was one of the most hostile work environments he ever worked in."

Duffy told investigators that he knew the VA had a responsibility to mitigate any harm to veterans but also knew how the VA operated: "They do not do crisis management." He expressed regret that he "failed to recognize the magnitude of the whole thing."

In the wake of the data loss, Duffy has retired and McLendon has resigned, according to the VA.

Talk Shows

---

Darryl Perkinson , president of the Federal Managers Association, and Mike Causey , columnist for Federal News Radio, will be among the guests on "FEDtalk" at 11 a.m. today on federalnewsradio.com and WFED radio (1050 AM).

James F. Sloan , assistant commandant at the U.S. Coast Guard for intelligence and criminal investigations, will be the guest on "The IBM Business of Government Hour" at 9 a.m. Saturday on WJFK radio (106.7 FM).

Stephen Barr's e-mail address isbarrs@washpost.com.