An IT security decision made around the time of the discovery of the devastating 2015 hack of Office of Personnel Management systems continues to have “a significant negative impact on the agency,” according to a watchdog report.
In April 2015, OPM’s CIO moved to halt all technology authorization activity while the agency worked on a plan to migrate its applications to a more modern environment – a project called the shell.
At the time, the IG warned of the “extreme risk associated with neglecting the IT security controls of its information systems.”
