Improvements Needed to Reduce Risk of Unauthorized Access to Highly Sensitive Data and Personally Identifiable Information

September 28, 2026

Improvements Needed to Reduce Risk of Unauthorized Access to Highly Sensitive Data and Personally Identifiable Information

In November 2025, the Office of Inspector General began reviewing whether a Department of Energy element effectively managed security over a high-value asset information system in accordance with Federal and Department requirements. During our test work, we identified areas of extreme concern. Given the critical nature of this system and the data contained within, coupled with recent changes within the responsible Department element’s management team, we are issuing this management alert.