House seal

House · Hearing transcript

An Update on DoD’s Struggling Background Check System

Tuesday, February 24, 2026

Summary

  • Justin Overbaugh (Acting Director, Defense Counterintelligence and Security Agency) admitted prior progress claims were too optimistic and pledged delivery by fiscal year 2028.

  • Alissa Czyz (Director of Defense Capabilities and Management, U.S. Government Accountability Office) said NBIS has its first reliable cost estimate but still lacks a reliable schedule.

  • Rep. Walkinshaw (D, VA-11) pressed Overbaugh on managing the multibillion-dollar modernization while overseeing intelligence agencies and serving as acting director.

  • Sessions and Mfume jointly condemned NBIS delays as a national security failure and demanded a permanent director, quarterly briefings, and cost accountability.

  • Overbaugh promised a detailed synchronization schedule with critical paths and risks by March-April and quarterly GAO reviews to prevent further slippage.

Morning digest

Get hearings like this in your inbox

Free weekday email. Unsubscribe anytime.

Hearing Details

Witnesses

Members Who Spoke

Free. We email you a one-time download link.

View on Congress.gov

Transcript

17:03 – 25:47

Good morning. Uh, the uh subcommittee on government operations will come to order and I'd like to welcome everybody uh to this important hearing without objection uh the chair may declare recess at any time and I recognize myself for the purpose of making an opening statement. We welcome today's hearing on the modernization of the federal government's background investigations and security clearance process. In particular, the Department of Defense's national background investigative services system, all known also known as IMBIS. If the topic of today's discoverna- discussion sounds familiar, it should. As a matter of fact, we're getting to know each other rather well in this room. This subcommittee first examined issues related to this back in June of twenty f- twenty four when Congress raised serious concerns about persistent failures in personnel vetting. Unfortunately, the need for continued oversight has only grown more urgent, and I must say that it is a welcome uh, seemingly welcome thing for the administration and GAO to want to tackle this issue. But it also leads us to today's hearing. Unfortunately, the need for this continued oversight has grown more urgent and as I said, both all three sides are willing to come together for this discussion. I want to thank the gentleman, Mister Nfume, for his insistence that we continue down this pathway. During our initial hearing we heard from um um uh the gentlewoman, Miss Siz, the same gao witness that we will hear from today gao has been tracking problems with our nation's federal personnel vetting process since as far back as two thousand and five we also heard from them dcsa director david ketler who in this same hearing room was brand new to the job at the same time to speak about the program's significant management and oversight poor scheduling, poor cost planning, and dozens of cyber security risks, which many of them have become true. At the time our witnesses offered recommendations and commitments to correct action. Today our focus remains squarely on NIMBUS and whether the program is on track to support the administration's stated goals of accelerating ground investigations and security clearances. Specifically, we want to know whether the system is progressing as discussed, what additional steps may be necessary to deliver a modern, reliable, personnel vetting platform that is long overdue, that exists in law. NIMBUS was env- env- envis- envisioned as the one-step shop for all phases of federal personnel vetting by providing modern tools for investigators. Once again, not a mission being met. It has become especially critical after the twenty fifteen OPM data breach in which the personnel data and sensitive information of over twenty-one million current, former, and prospective federal employees and their families were exposed. Yet today, Imbiss has deployed only limited capacities and capabilities, and the program is now more than eight years behind schedule, with completion delayed from twenty nineteen to twenty twenty eight. This has cost the American taxpayer hundreds of millions of dollars and has wasted valuable government resources. I will note before I turn the page, it would be simple to blame the people who are here today, and I don't intend to do that. I intend to work with the people who are here and to move forward, but we're going to take seriously what is done today with the need to correct that action. In addition, it is called into question the safety and reliability of all aspects of the federal uh personnel vetting system. It's also showed the broader government-wide initiative to reform personnel vetting policies and processes known as in the law trusted workforce two point O zero. The federal workforce and the government's industrial partners deserve better. That was why we have held so many hearings and that's why the law was made. Without these vetting reforms in place or the promised information technology like Imbus, that serve as their backbone, security clearance providers, and recipients like advanced tools and the assurance that their personal information is guarded and safe. Agencies and contractors are left struggling with the same persistent challenges, slow and delayed onboarding, delaying their access to facilities and inefficiencies that underni- undermine mission readiness that people like Mister Nfume and the administration need to make sure that they have the assured people in place. As was clear from our last hearing, concerns about Imbus are shared by members of Congress on both aisles. This is not a partisan issue. This is a national security issue. We must continue to work together to ensure the security, ef- efficiency, and accountability of these personnel vetting systems and process which play an increasingly vital role in safeguarding our national interest comes to fruition. I'm hopeful that our witnesses who have taken place uh who have provided this uh subcommittee with data and information over the last few weeks recognize that the progress that has been made over the last eighteen months must continue. Last September, after Director Kettler's retirement from DCSA, ranking member of whom I wrote the DOD to express our concerns about this leadership. Strike that, Department of War, DOW. We encourage swift action to put a new director in place, especially given the ongoing problems that AMBASS has and the need to effectively place leadership in that role. We will probably hear today some of the follow-up to that, but it it comes with a lot of uncertainty and a lot of frailties attached to it. We're still gonna have the hearing, and while I have no doubt that this administration will find another leader with necessary commitment, passion, qualif qualifications to guide this full and successful successful implementation, I remain deeply concerned. Now, over seven months since Mister Kessler announced his retirement, DCSA remains without a permanent director. And part of the discussion today will be to put on record that needed desire for this administration to accomplish this. I'm confident that that my friend and colleague, Mister Mfumez, not only shares my concern, But I wanna thank him for his professionalism in addressing these issues. Today I look forward to hearing more about the progress, bringing the new director on, as well as status of the National Background Investigation Service program because this hearing will further develop because uh GAO is here, lots of other ideas that they've got that are challenges that must be met. I look forward to hearing how we conti- continue to use this relationship that we share with the administration and GAO and I would now yield uh to the ranking member Mr. Nfume for his opening statement the gentleman is recognized.

25:48 – 29:42

Thank you very much Chairman Sessions and uh good morning to all of our witnesses I wanna thank you Mister Sessions for your partnership on this issue and a lot of other issues that have come before this. committee that really require a bipartisan approach. Uh, you've been very clear in that regard, and it has been clear, I think, also, uh, to the full committee and to others who've watched us over the last couple of years. Uh, again, my thanks to the witnesses. When it comes to national security, I think we all can agree that partisanship stops at the water's edge. At least that's what I was taught long ago. And it's important to underscore that because our goal is straightforward, deliver a background check system that keeps the United States of America safe. That also gets qualified people to work without delay and continuously verifies that they deserve and have earned our trust. America, in my opinion, cannot hope to maintain our technological advantage in the national security space if we make the best engineers, scientists, linguists, analysts, and others spend months, if not years sometimes, in limbo before they can serve. And if we can't clear people, we can't complete our missions. It's very, very simple. The National Background Investigation Services, or NBIS, program was launched, as we all know, to replace the outdated cumbersome legacy systems and to reduce backlogs and to harden cyber security. However, successful implementation is still far from a reality and the current plan is for technical capabilities in fiscal year twenty twenty seven, full implementation in twenty twenty eight, and continued rigorous oversight if necessary to get us across the finish line. Now, since twenty seventeen, The government has spent about two point four billion dollars on NBIS and legacy sustainment to keep outdated systems up and running. That is an awful lot of money, two point four billion dollars. And the department projects that about another two point two billion is needed to finish the job so we're far off the mark of where we had hoped to be. It's an enormous amount of money for the government to spend on anything, and have so very, very little to show for it. I understand that this project reached a state of disarray and that after eight years of implementation it had to return to a planning phase to restructure the entire acquisition strategy. This has left contractors in my district and districts all across the country stuck with unclear instructions and increased cost as they juggle various systems. In a region where roughly nine percent of jobs require a security clearance, this really is not a small problem, it is a huge, huge problem. It is a direct hit to workers and employers in my city of Baltimore, and cities and towns and hamlets all over this country, east to west. They depend on a functioning clearance system to be able to do their jobs. And so the consequences do not stop with my district or the chairman's district. This is chaos and in many respects it's also come with system outages that have stopped work on ground operations and have caused things come to a halt all over the globe. These are more than just teachable moments, I hope, and these issues have real mission

29:40 – 29:41

Yeah.

29:43 – 34:44

impacts. So here are a few points I'd like to hone in on and make sure are on the record today. First, we need an ongoing sense of vigilance on this project, otherwise we'll be right here a year from now treading water. The DCSA team has provided quarterly plans and gives a quarterly report to the industry. We need that in an ongoing fashion. But I pledge that we here in Congress are not going to get bored or look the other way, and we won't settle for surface level check the box compliance exercises and I think many of you have followed the work of this committee know that that's the case. We're gonna be and continue to be very dogged about trying to bring about change here. We'll make sure that the goals of NBIS uh implementation are quantifiable and that they are very very clear we will be monitoring progress toward each milestone and we will do that quarter by quarter. Secondly, we must insure that transparent cost on tran on taxpayers are just that transparent and so that trust taxpayers can trust MBS and trust also that the cost that they are paying uh since it's more than doubled than what was previously expected will be looked at and looked over. I think all of us here agree whether you're on this panel or in the audience that we owe it to the American people to hold the department accountable for overruns and to prevent such gross mismanagement moving forward, both for the remaining steps of NVIS implementation and for future projects. Finally, I expect that real results from real people uh will be coming soon. We need to know that we are seeing measurable work in progress in bringing down the backlogs. We can't just trust that things are getting better and we will not let up. until we get GAO's uh GAO's seal of approval and can see for ourselves that the prospective employees are on the jobs as fast as possible. I'm gonna repeat what the Chairman just said and that is that the last DCSA Director, David Catler, announced his retirement as you heard from his role in July of last year. I cannot help but to wonder how we are still sitting here seven months later, and we still don't have even a nominee for DCSA. Today we have a Director of uh Defense Intelligence and Security Agency before us overseeing DCSA. Uh that's just one of uh the many duties, Mister Overbaal, that you have. We appreciate your work uh and we expect that you will keep NBIS on track as Acting Director, but it seems like That's a full-time job to me, and so I ask for the following clear on-the-record commitments from the department. One, name a permanent DCSA director and the plan for getting a qualified candidate into the position as soon as possible. Two, a full-cost profile that ties dollars spent on invas to the effectiveness of personnel security reform. And three, a commitment to ongoing quarterly briefings about NBIT's progress toward its stated milestones. And if any of those milestones slip, I would expect, and I'm sure the Chairman would also, that the department will notify the subcommittee in writing within five business days, uh, regarding the cause, the impact, and what the recovery plan is. People in this country expect stewardship of their money. And they expect just and trustworthy persons in and around government to carry that out. And they expect the department and a trusted workforce on board it without delay, will become a reality very, very soon. They expect transparency when things go right and when they go wrong. That is the spirit of this hearing. There will also be transparency in measuring the progress or the lack thereof. So if we do our jobs here, all of us, those of us who have sworn an oath and have the privilege of representing congressional districts and those of you who are working for the the agency or other agencies uh we'll turn plans into demonstrable results and turn intent into real and lasting impact. That's the spirit of this hearing today. Um I want to thank again Chairman Sessions for being as dogged as he is in making sure that as a team we work together to bring about real and lasting change. Otherwise we have just really just failed our jobs and failed our mission. And, Mister Chairman, I would yield back.

34:46 – 35:58

Thank you very much. I appreciate the gentleman's comments. Um I know that the people who are witnesses today and and and have been a part of this for quite some time do recognize that you and I are a tempting along with this subcommittee on a bipartisan basis to move a decision making and authority and i concur completely with your comments that this hearing today will be the beginning of that that will increasingly upbeat tempo will be required on both sides um without objection i would uh allow and uh have congressman walkinshaw of virginia a very kind gentleman who's asked to be waived onto the subcommittee for the purpose of questioning the witnesses at today's subcommittee hearing. We welcome him to this subcommittee hearing. Also just to be nice and fair because she's my dear dear friend from the last couple hundred years, we welcome the distinguished chairman of the rules committee, also a member of this subcommittee, My dear friend, Virginia Fox.

35:58 – 35:59

I'm glad to see you.

35:58 – 36:00

Virginia, welcome today. I'm delighted that you're here.

36:01 – 36:02

I'm glad to be in the principals.

36:03 – 36:17

Oh, well you didn't make that, Virginia. Uh, for those of you who know, I have told Virginia for the last twenty years or so, every day, I love you, Virginia. And, Virginia, I love you and thank you.

36:16 – 36:17

I love you, too.

36:17 – 38:16

Yes. I'm pleased to welcome our witnesses for today. Mister Justin Overbaugh is currently serving as both the Acting Director of the Defense Counterintelligence and Security Agency, as well the Deputy Under Secretary for Defense for Intelligence and Security. In this important role as acting DCSA Director, he's responsible for leading efforts to protect Americans' trusted workforce, trusted workspaces, and classified information. And uh, he has a daytime job and a nighttime job obviously because this, as Mister Mfume noted, is a heavy lift and we appreciate him, his professionalism in taking time to be with us today. Then we uh uh also welcome Lisa Siss, who serves as the Director in Defense Capac- Capac- Capacit- Capabilities and Management Team at GAO. In her role at the Government Accounting Office, She oversees reviews on the personnel security clearance process, artificial intelligence, intelligence infrastructure, and DOW's approach to business transmissions, among other topics. And we have found her testimony, professionalism, and reliability to not only want to work with this subcommittee, but in the professional attribute that is related to her agency and we welcome her. So thank you very much. I look forward to if I could have both of you stand and raise your right hand for the purpose of administering the oath to the witnesses pursuant to committee rule nine G the witnesses that stand before us uh raise their right hand do you solemnly swear or affirm that the testimony that you're about to give in is the truth the whole truth and nothing but the truth so help you God.

38:16 – 38:17

I do.

38:17 – 39:33

Let the record reflect that both the witnesses answered the affirmative. Thank you very much, and you may take your seat. Uh, we are now going to move to recognizing the witnesses, and we appreciate you being here. Uh, you're not new to this. You know that we've got a, uh, yellow light, a green light, yellow light, red light. Uh, I would ask, as I always do, uh, for the gentlemen to understand that we would like for our witnesses to give us the information that is necessary. And I am not going to stick to necessarily a five-minute rule, if either side goes over. But we are here today to get to the bottom of this because I think that this will be a hearing that whoever you hire will want to know how serious this is, And we'll wanna know that it's been vetted not only by GAO, but the importance to each of these members that are here. And so we're not gonna cut you off. We want you to give full testimony, full hearing. Full articulation on the matter. And I'm delighted that you're here. The gentleman, Mister Overbaul, is now recognized.

39:36 – 46:47

Good morning, Chairman Sessions, Ranking Member Mfume, and distinguished members of the committee. Thank you for the opportunity to appear before you today. It is an honor and a privilege to represent the over th- thirteen thousand civilians, service members, contractors of the Defense, Counterintelligence and Security Agency. I was appointed Acting Director of DCSA on November nineteenth, twenty twenty five, with a clear mandate from the Undersecretary of War for Intelligence and Security, the Honorable Bradley Hansel. to ensure DCSA finally delivers the critical security capabilities our nation requires. I understand this committee has received testimony from previous leaders suggesting the agency was largely on track. Respectfully, that assessment was too optimistic. The truth is, DCSA has been an agency in the midst of an identity crisis. After it was cobbled together from disparate programs, DCSA never truly self-actualized or forged a unified culture. I contend that this foundational issue has directly contributed to the significant challenges in delivering both trusted workforce two point zero and the national background investigation services program, on time and on budget. It is my assessment that previous agency leadership, in an effort to establish a brand, focused more on marketing than on delivering value and allowing that The agency's original purpose became blurred, drifting towards an intelligence-focused entity, rather than embracing its vital security mission. Instead of focusing on executing its most important functions with excellence, the agency attempted to accumulate more missions to the point that it failed to achieve its core purpose. Altogether, the lack of a viable vision, clear expectations, and leadership accountability from past department oversight allowed DCSA to fail. Under Secretary Hansel dismissed DC- DCSA leadership because the transformation required here cannot be incremental. It must be complete and total. He had little confidence that the leadership he inherited would have been successful in leading the change from a sclerotic, compliance-based bureaucracy to a customer-centric, business-oriented entity the Department of War and the nation need DCSA to be. While the Under-Secretary continues his search to select a new director, with the optimal mix of private sector, technology, and government experience, he directed me and the interim DCSA leadership team to steer toward a business model that mirrors Secretary Hegses's approach of eliminating bureaucratic processes, in favor of speed and innovation. In my short time as Acting Director, I have found what I expected. A dedicated, talented, and innovative workforce, unfortunately shackled by burdensome processes designed not to empower them, but to maintain the status quo and sustain layers of management. Our focus now is on unleashing their potential. To that end, we are designing the agency for purpose, moving it from a cumbersome bureaucracy to an agile organization, that can serve as a model for the rest of government. At DCSA, we will build a workforce of the future founded on a culture of meritocracy, efficiency, creativity, empowerment, and accountability that enables timely, risk-informed decisions. DCSA's struggles to deliver INBIS and implement trusted workforce two point zero are but symptoms of the deeper cultural problems I have outlined. These two efforts are not merely programs. They are the backbone of our national security personnel vetting enterprise. Their delivery is non-negotiable. While the Government Accountability Office rightly noted recent progress on the INBIS program's cost and schedule estimates, we must be honest that this proj pro progress is fragile. Without the cultural and structural reforms we are now implementing, technical gains alone, will not secure success. Absent this transformation and a refocus on its core mission, DCSA would surely continue to fail to meet its targets for Imbiss development and deployment. We look forward to partnering with GAO to give us an objective look at the agency, as we continue to make reforms. Under Secretary Hansel and I share as a top priority the delivery and development of Imbiss by fiscal year twenty twenty eight. He and I are aided in this task by the Under-Secretary of War for Acquisition and Sustainment, the Honorable Mike Duffy, who has designated Imbiss as an acquisition category one special interest program, subjecting it to the highest level of scrutiny. At DCSA, we are overhauling our governance, acquisition strategy, and partnership with industry to ensure every decision serves the core mission. Through the trusted workforce implementation group, we work to validate the policy requirements and make sure that they are mature through the executive agents and are translated into real-world capabilities delivered by Imbiss. These goals are to get people to work faster, eliminate waste, optimize risk management, and improve the experience for our government customers. While the full transition to trusted workforce two point zero and Imbiss will be complete by FY twenty twenty eight, We are accelerating the development of key capabilities now, including adjudicative improvements for public trust cases, expanded use of interim secret clearances, and broader application of vetting services features. Even with a renewed vision, this will not be easy. Imbiss is a massive undertaking intended to replace deeply entrenched legacy systems across the federal government. Getting this right is as important as getting it done quickly. DCSA now has the appropriate oversight, a clear mandate for change, and a leadership team committed to transparency within the department, with partners in the inter- agency, industry, and other stakeholders, and with you here in Congress. The exceptional team at DCSA is the driving force that will make this transformation possible. My commitment to you is that I will continue to foster a culture of innovation and accountability that empowers them, and that I will maintain oversight in my role as Deputy Under Secretary for Intelligence and Security. We appreciate Congress's engagement on this critical issue, and look forward to demonstrating through our actions and results that DCSA is on a new and better path. Thank you, and I look forward to addressing your questions.

46:49 – 46:52

Thank you very much. The gentleman is now recognized.

46:54 – 51:48

Chairman Sessions, Ranking Member Mfume, and members of the subcommittee. Thank you for inviting me to testify again on GAO's work on personnel vetting, and specifically the National Background Investigation Services System, or NVIS for short. As you know, the U. S. government relies on over four million personnel with security clearances to protect our nation. Personnel vetting helps ensure a trusted workforce. but the government has struggled with managing this process for years. This issue has been on GAO's high risk list since twenty eighteen, due in part to challenges with IT systems. Reform is urgently needed. The federal government is taking too long to grant security clearances to essential personnel. For example, it takes over two hundred days to grant a top secret clearance. This is eighty percent longer than the government's goal. As you know, after a massive cyber security breach of OPM systems in twenty fifteen, the President tasked DOD with building a new IT system to manage personal vetting. The department began developing INVIS in twenty sixteen. My statement today focuses on the department's progress with INVIS and what actions are still needed to ensure its success and achieve personal vetting reform. First, the good news. DCSA has made progress addressing our recommendations. It now has a reliable cost estimate for INBIS for the first time ever. A reliable estimate should help the program better manage expenses, avoid unexpected increases, and promote transparency. However, the government is years late in delivering INBIS. This failure happened in part because DCSA had not developed a reliable schedule as we first recommended several years ago. DOD had originally planned for NBIS to be fully functional in twenty nineteen, and has changed its deadline several times since then. In twenty twenty four, DCSA paused NBIS development while it drafted a recovery plan. Just last summer, the department began development again. DCSA now projects it will finish NBIS development in twenty twenty seven, or FY twenty twenty eight according to DCSA's statement. This is nearly a decade after its original goal. The latest NBIS schedule shows some improvements in key areas, but overall we find that it is still not reliable, putting NBIS at risk of further delays. Notably, DCSA has not done a risk analysis and thus cannot determine where slippage is most likely to occur. Without implementing this best practice, it cannot effectively target actions to milestones there are that are at the most risk. We are making new recommendations in our written statement today for DCSA to address these and other deficiencies. Having a reliable schedule is a basic program management principle. We agree with Mister Overbaugh, DCSA needs to get this right, given the program's history of missed milestones. Further, while DCSA has a reliable cost estimate for NBIS now, delays have caused the price tag to balloon. The department has already spent at least two point four billion dollars developing new NBIS systems and maintaining OPM's legacy systems. It now projects spending an additional two point two billion to finish NBIS, bringing the total cost to the taxpayer to about four point six billion dollars. This is a one hundred percent increase over DCSA's previous projections. Finally, strong and sustained leadership is critically important, especially with high-risk government programs like this one. When I last testified, INBIS had been failing. Since then, DCSA has taken some important actions to try to get things on track, but shortcomings still persist. This at a time when DCSA does not have a permanent director and the time it takes to get a security clearance continues to far exceed goals. Strong leadership and oversight, like the important work this subcommittee is doing, are essential for the program to continue to make improvements and ultimately deliver what it has promised. Simply put, personnel vetting reform has the potential to better protect our country. But the IT must be in place for this to happen. Mister Chairman, Mister Ranking Members and members of this subcommittee, thank you for your time. I look forward to your questions.

51:49 – 52:05

Thank you very much. Uh, detailed information about what needs to be accomplished I think is very clear from your constant reports, and I appreciate that. We now move to our members, and I will move to the distinguished gentlewoman

52:12 – 53:20

uh thank you mister chairman um no one put in my notes that i should be very concerned about this but i am along with all of you this what our witnesses have said today is very very troubling but let me say last fall the subcommittee was supposed to hear from d. c. s. a. director catler shortly before he left federal service. While I appreciate Mister Overbaugh's attendance here today as acting director, I'm disappointed there's still no permanent replacement for director Kettler. As Miss Shiz just said, steady leadership is important for continuity and accountability. The National Background Investigation Service needs to become operational. Having a permanent director and NCSA would send a strong message that the DOD is serious about the issue. Can you elaborate, Mister Overbaugh, on how delays in the implementation of MBIS impacts other federal agencies that rely on timely clearances?

53:23 – 53:42

Representative Fox, I can. It's very clear to me that the entire federal government and all the agencies and partners that rely on DCSA to deliver trusted workforce two point zero um are impacted when employees cannot get to work in a timely and efficient manner.

53:43 – 54:10

Well, as a follow-up, based on DCSA's recent review of NIMBA's implementation, what actions are you and others taking to get it back on track? We've just heard it's gonna cost an additional two point two billion dollars and be delayed to twenty twenty seven, twenty twenty, twenty eight. What in the world are you all doing?

54:12 – 55:18

That's the exact question that I asked uh Representative Fox when I took over the agency uh in November. I can tell you that the that our teammates at at DCSA have done a fantastic job on establishing the technology required within this to ensure that we can get to trusted workforce two point zero. What the agency had failed to do, however, in the past was match emerging requirements, the business or the mission side, if you will, if you will, with that technology. As a result of that identified failure, the trusted workforce integration group was stood up. That brought together our technology specialists along with our operations and mission side. Together, they produced, over the last couple months, uh, key set of milestones that we can use to judge DCSA's performance on delivering trusted workforce two point zero, moving forward. And those milestones are laid out in the PAC principle, the Performance Accountability Council's FY twenty-six implementation strategy.

55:18 – 55:19

You've heard of it.

55:18 – 56:03

Now, this is a great step forward and it gives us something that we can sink our tees into to hold ourselves accountable for progress. It's not complete. We need to do more here. We need to to use these milestones to break down um almost a complete work um breakdown structure. So we're then able to identify the things that our GAO partners have have told us are critically important, namely critical paths and the identification of risks. Um that is forthcoming. We're looking forward to producing that document in March uh, April time frame, and would certainly look forward in future interactions with this body, to share the, the work that we've done there.

56:04 – 56:18

And the, the Chairman mentioned the issue of transparency and the need for that. Are you committing that, um, the reports and the progress are all going to be transparent?

56:20 – 56:21

Without question.

56:21 – 56:41

Thank you. Uh, Miss Shiz, In the committee's twenty twenty-four hearing you raised concerns about cyber security privacy protections has DCSA taken concrete steps to mitigate those risk and have have you seen evidence these steps are effective?

56:43 – 57:51

Yes, DCSA has taken swift action to address our recommendations. At the time of our last hearing we put out a report with thirteen recommendations, mostly focused on the management of cyber security making sure that there is current guidance and effective oversight um The previous DCSA director director Catler uh made it a priority to implement all of those recommendations within one year which is very fast for a GAO report to have all recommendations closed in one year so we're we think that that's a very positive effort uh DCSA does need to remain very very vigilant on this this is the whole reason that the department has responded responsibility for personal vetting because of that cyber security breach in twenty fifteen that compromised as uh the chairman mentioned uh data on over twenty two million uh federal employees and contractors we do have work that's not available in the public setting to discuss looking more specifically at INBIS and testing of cyber security controls and issued a re recent report uh in December on that which we have discussed with DCSA but we are confident that they are taking it seriously yes.

57:52 – 57:58

thank you very much and thank you mister chairman for um recognize me wait uh yield back

57:58 – 58:03

gentleman yields back her time thank you very much the gentleman mister is recognized

58:04 – 58:16

thank you mister chairman i want to yield to the gentleman from virginia mister walkinshaw who has waved onto the committee and i'll pick up with my questions at at some other point in the hearing mister walkinshaw

58:16 – 59:15

thank you i thank the ranking member and and mister chairman thank you for Having me today and to our witnesses for being here, Mister uh Overbaugh, as you laid out in your testimony, you have many responsibilities in your role as Deputy Under Secretary for Intelligence and Security. I know that in your role you serve as Acting Director of DCSA, as we're discussing today. You oversee DIA, NGA, the NRO, the NSA. You serve as an advisor to the Under Secretary of Defense on intelligence-related matters. And given all of that, I guess my question for you is uh well why should the committee and the American people have confidence that you can manage this multi-billion dollar critical modernization while performing your many other duties including safeguarding our nation's secrets from adversaries ensuring proper vetting of individuals with access to classified information and as I noted acting as an advisor to the Under Secretary.

59:19 – 1:00:19

Uh, Representative Walkinshaw, I appreciate that question very much. And the short answer is I'm surrounded by a fantastic group of teammates who are assisting me in this endeavor. I have, uh, down at DCSA as Acting Deputy Director, Miss Tara Jones, who also comes from our office at the, uh, Undersecretary of War for Intelligence and Security. In addition, we have Acting Chief of Staff, Colonel Brooke Carr. Um, our team, uh, down there Um, and they're down there on a permanent basis to assist and lead that, uh, assist me in leading that organization. And I have fantastic teammates as well, uh, up in my office in the Pentagon. And so while I understand from an external perspective, it looks like we are stretched thin, and in all honesty there are times when it feels like it. But I'll tell you that the passion that we have as a group of teammates to get this task right energizes all of us and the entire team. Um, and quite honestly, um, it's an honor and a blessing to be able, um, to do this.

1:00:19 – 1:00:55

Thank you. In a recent, a January twenty second, twenty twenty six, uh, briefing with committee staff here, I think it's accurate that you said you intended to eliminate what you've called inefficiencies within DCSA and suggested, and you can correct me if this is wrong, that you felt there was a need to eliminate positions at the agency. So are you planning to reduce the workforce at DCSA? And and if so, how will you ensure that those cuts to the workforce don't further derail this critical modernization?

1:00:57 – 1:01:34

I think DCSA faces a challenge, representative, uh, that the entire government faces and quite frankly, our our society, uh, writ large faces, and that is the impact that technology is having and is going to have on the way that we work. moving forward. Um, DCSA faces this dynamic uh quite acutely with our responsibility to implement IMBIS and trusted workforce two point zero. I can't say at this time exactly what the workforce of the future at DCSA looks like exactly but I know that we have an obligation to empower our teammates to ensure that they can be as effective as humanly possible uh in the future of work.

1:01:34 – 1:01:40

So you don't have any immediate plans to reduce the workforce Short or medium term.

1:01:43 – 1:01:57

Quite the contrary, uh, Representative Walkinshaw, we are constantly looking at the DCSA organization and determining where we can find efficiencies. I have no implementable plans at this time, but it is something that we will be looking at moving forward.

1:01:57 – 1:02:09

Okay. One of the things I understand this committee has asked for previously as an organizational chart for your staffing and any proposed changes is that something you c- can commit to providing to us.

1:02:11 – 1:02:17

I would absolutely uh be happy to provide that to you once we have a clear understanding of the direction that that we think we need to go in.

1:02:18 – 1:03:08

OK. Thank you. Um, Mister Everbaub, DCSA's job, as you know, is to vet cleared personnel and ultimately ensure the protection of classified US government information. It is a cornerstone of our national security. I I appreciate the passion that you have for the work and your teammates have. I think I share the concerns on the dais here that the mandate is far too large and critical to function indefinitely under an acting director no matter how passionate we need a director focused on its counterintelligence mission, who has the skills and the bandwidth. I don't question that you have the skills, I question whether you have the bandwidth to keep this project moving forward. I hope you can commit to providing this committee with a hiring plan and criteria for a new director promptly. Thank you and I yield back.

1:03:10 – 1:03:22

Chairman yields back his time. Thank you very much. I've been approached by several members who planned to be in attendance today. I would move next to the gentleman, Mister Nfume, for any time he would choose.

1:03:23 – 1:04:25

Uh, thank you very much, Mister Chairman. I um, let me just be deliberately redundant for a quick second. Um. INVIS and the INVIS project is as you heard repeatedly today ten years behind schedule and already billions and billions over budget. So I'd like to know and by the way this keeps me up at night because America's secrets are at risk the longer we don't do what we ought to do here and the Russians and the Chinese who can tune in to Cspam whenever they want to to be assured that we're behind will look at what we're doing and year year after year get emboldened because we are so transparent about why and when we expect to have this this completed so mister overball when you look as you have been doing since uh november when you came on board at cost overruns which ones are the most apparent to you

1:04:29 – 1:05:19

Representative, or excuse me, um, ranking member Mfume, to, to me the, the most uh alerting is the, the overall amount of money that we've spent so far writ large, the two point four billion, and not delivering the capabilities that we promised over time to the American people. Um, it's, there are, there are, there are many details within that. The failure to, as I mentioned earlier, to match up the operations and business side with the technical side. There are there are redundancies and inefficiencies in there, but I think that that number overall, the two point four million, uh, correction billion, is inexcusable and one of the things that drives me and the team on a daily basis, um, to fix the things in the past that we have not done well, so that we can deliver for the American people.

1:05:19 – 1:05:23

Do do you think your predecessor felt the same way, was driven the same way?

1:05:24 – 1:05:40

Uh, I I won't speak to the the intent or what was going on inside. uh the minds or hearts of any of my uh predecessors i know that the organization today sits ready um and they are excited about delivering for the american people

1:05:40 – 1:06:45

well and i understand it and i appreciate it but you have to realize what it's like to sit here year after year after year after year and be told the same thing that it's getting better the organization understands we've got the right path we're gonna be transparent And in that process, contractor after contractor is billing the United States government for services that I assume are never fully completed within that caveat saying we couldn't do this, we won't do this, or we need more money for that. That is very, very disturbing. It is not your fault. I'm just giving you the history of how we got to this point and why it is so very disturbing to us. Uh, the - you've heard the term " fat rats", well, a lot of making out with a lot of money. and not providing the kind of service that they are being contracted for and paid for. And, Mrs., if if I could just ask you the same question, uh, were there some identifiable cost overruns that repeatedly, year after year, GAO looks at, identifies, and points out?

1:06:46 – 1:07:35

Yes. In fact, our previous analysis showed that DCS or DCSA did not have a reliable cost estimate for INVIS. it was not accurate, it was not comprehensive, it was not credible, and it was not well documented. So we can't tell you where where the problems were. It was across the entire estimate. It could not be relied upon for planning. Um, now they have taken important steps, including, uh, conducting an independent cost estimate, uh, to get a better handle on costs. So we're at a better place now. Uh, that estimate needs to be updated annually. And so I advise the subcommittee to stay on top of DCSA as we will uh to make sure that that is updated annually with actual costs. But they are better positioned now. Unfortunately, and if I can kind of veer off a little bit,

1:07:35 – 1:07:35

Mm-hmm.

1:07:35 – 1:08:47

um earlier on in the program I think one of the key shortcomings was a lack of oversight, right. So DCSA was really policing itself in its actions. No one broader in the department was taking a look. at what DCSA was doing as INVIS was going off the rails. There were some steps put in place uh for INS uh where Mister Overbaugh is from to be now the program's sponsor and then even higher within the department uh to have milestone decision authority. There were some other mechanisms put in place, the requirements board for example that's supposed to meet quarterly and some other reporting requirements where we do still have concerns is some of these oversight mechanisms are great that they're in place but we're not actually seeing them working as they're supposed to be working so that requirements board that i just mentioned is supposed to meet quarterly we would think it met last friday but before then had only met in june right so maybe once a year so it's good to put those mechanisms in place but you have to exercise the oversight as well too so that's something that we'll be taking a look at as the program moves on making sure that oversight is actually working.

1:08:47 – 1:08:57

And and what would GAO immediately recommend be done uh as you look at where we are in this process notwithstanding the things you just mentioned.

1:08:57 – 1:10:07

Right. I think we've been on record for years that you really can't plan effectively without having a reliable schedule for the NBIS program. It it milestones have shifted for years we're you know we're a a decade this is a decade-long program now costs have increased one hundred percent we still don't have a reliable schedule. So it's great that we're mirroring a policy with milestones, but our recent analysis showed that almost half, forty perc forty six percent of milestones in the trusted workforce two point O strategy that are NBIS related have slipped over the past nine months. Forty six percent because of NBIS delays. Right? So that that's something that's that's gotta be addressed right away. We have new recommendations kind of to target in on what needs to be done for a schedule. Um, and it's great that Mister Oberbaugh is very focused on this, but this is something that we've been talking about for years. Uh, we talked about it at the last hearing as well, without getting this in place, the - the program is still as at risk of slippage going forward and then increased cost to the taxpayer.

1:10:08 – 1:10:20

And Mister Oberbaugh, I know you've been there since November, but do you have some semblance of a schedule, a sketch, an outline? Are you talking directly to GAO to figure out how and when that oughta be completed?

1:10:22 – 1:11:11

Ranking member Mfume, uh, the schedule has yet to be developed and that's one of the great things um that we've discovered through our partnership with GAO. And as a reminder, as we dig down into the milestones that the TWIG recently established, we will be producing that schedule. That's the document that I hope to bring back to this body uh, in the March and April time frame. Um, I, I do wanna push back on one thing that you said earlier. You mentioned that it's not my fault. Uh, I just wanna give you the confidence, sir. Um, uh, as I'm acting director, uh, everything that this organization does or fails to do is now my responsibility. We do take on, um, the fact that the previous failures are now our responsibility. Uh, and we own them, and that's part of the cultural change that we're trying to instantiate at DCSA.

1:11:12 – 1:11:31

Well, that that's good to know and it's good to hear, but it really wasn't your fault, cuz you were not there. Um, but I I commend you for owning them. Um, so are you saying to the Chairman and members of the committee that by late March or early April this schedule will be in place and we can call another hearing, and talk about it?

1:11:33 – 1:12:00

What what our team is attempting to produce by by March April time frame, is a business operationalization synchronization schedule. That is our attempt to get at the critical paths and the risks that GAO has rightly pointed out that we continue to lack. Once we have that established, I'm happy to bring that product back. We have as a goal to establish that by the March and April time frame.

1:12:00 – 1:12:07

And just one other question. Are you interacting with GAO to make sure what you produce is exactly what they have identified?

1:12:09 – 1:12:25

We will be moving forward. I had the opportunity to meet Miss Sizz the other day in preparation for this hearing, and we agreed that we would interact quarterly, on a quarterly basis moving forward, and we look forward to them helping us provide an objective look at our organization as we try and implement the change.

1:12:25 – 1:12:27

Thank you very much. Thank you, Mr. Chairman.

1:12:29 – 1:12:33

We'll uh move to the distinguished gentleman from Tennessee, you're recognized.

1:12:33 – 1:12:47

Thank you, Mr. Chairman, one of the things I like about your chairmanship in your relationship with our ranking member i always dig his line of questioning and sometimes like myself it takes me a little longer than five minutes and i appreciate you allowing us to do that um

1:12:47 – 1:13:02

gentleman is recognized and the gentleman does understand from his experience in dealing with mr. Mfume and myself i would like for you to take the time that is necessary to express yourself as well as witnesses to get everything out and the gentleman is now recognized

1:13:02 – 1:13:08

thank you mr. chairman um Ma'am, uh, uh, your last name is Siz? Is that how you pronounce it?

1:13:08 – 1:13:09

That's correct, yes.

1:13:09 – 1:13:41

All right, well, Birchit. Nobody gets that right either. I was on some show this weekend. I said, " It's birch like the tree and et like I just et breakfast." And they all laughed. And my wife got on me and said, " No, y- it's not Birch-et, it's Birch." It's it's Birch-et. It's Birch-et. You know, I mean, they can't ever get it right. So, anyway. Thank you. Um, since twenty twenty four, how has the Defense, Counterintelligence and Security Agency, um, d uh the dcsa progress in addressing the nbis high-risk areas like cyber security and what issues remain

1:13:43 – 1:14:08

so since twenty twenty four dcsa has made significant progress addressing cyber security issues within this we had issued a report in twenty twenty four really focused on the management um and lack of management attention on cyber security uh we made thirteen recommendations at that time the dcsa leadership took swift action and implemented all of those recommendations uh we we saw that as

1:14:07 – 1:14:10

that what did you say they they implemented all of those

1:14:10 – 1:14:15

they implemented all thirteen recommendations from our twenty twenty four report on cyber security yes

1:14:11 – 1:14:19

well which of those are you most concerned about that moving forward

1:14:19 – 1:15:15

right so we were very concerned that there was just a lack of management oversight of cyber security in general they were using outdated guidance Um, they were not uh there were issues with privacy controls, there were folks that didn't have the necessary training uh to use the system. Uh, so those were some issues that we pointed out, um, and they did take immediate action, addressed all of those recommendations in a very, very fast time frame uh for for addressing GAO recommendations. Um, as I mentioned earlier, we do have a non-public report uh that we did produce in December on cyber security to looking at testing of cyber security Um, so it is a topic that we stay on. We know DCSA is taking seriously, but the the entire reason that the department has responsibility for the IT system was because of the cyber security breach in twenty fifteen of OPM's systems. So it's critically important that they get that right.

1:15:13 – 1:15:17

Okay, OPM means. OPM means.

1:15:16 – 1:15:20

Right, the Office of Personal Management who had previous responsibility.

1:15:18 – 1:15:25

Okay. My office, we don't use initials because I'm sixty one and it kinda fills up my brain.

1:15:24 – 1:15:28

Sure. Right, the Office of Personal Management ha- previously had responsibility

1:15:27 – 1:15:27

Yes, ma'am.

1:15:29 – 1:15:30

responsibility of personnel vetting,

1:15:29 – 1:15:29

Yeah.

1:15:30 – 1:15:33

but that moved after that cyber security breach.

1:15:33 – 1:15:33

Well, thank you, ma'am.

1:15:33 – 1:15:34

Sure.

1:15:34 – 1:15:39

Um, when I get back to the office, I'm going to have to ask some of my young people exactly what you just told me. So, thank you.

1:15:40 – 1:15:40

Yeah.

1:15:40 – 1:15:55

Sir, let me ask you a question, and y- your name is Overball, I believe I can get that one right. Thank you, brother. Um, since you were appointed, what steps have you taken to address the cultural issues identified that you I think you made them in your opening statement.

1:15:57 – 1:17:03

Representative Burchard, thank you for the opportunity um to to chat with you today. There've been a couple things that we've done from a cultural perspective. The first thing was we looked at leadership across the organization and we identified where we had um individuals who were stymieing progress because they were too comfortable with the status quo and we made some changes in that regard. Second thing that we've done is myself and Jones have traveled to a number of the different locations where our DCSA colleagues and teammates reside we have over a hundred and sixty-three different locations across the United States and we've begun to hear from folks who work on the front line across our agency about the types of things that we can do at a leadership level to change the culture. Ultimately, the steps that we're taking are designed towards transforming it from a reactive to a proactive organization from a risk-based or, correction, from a fear-based culture to one that looks for opportunities to continue to shore up security for the American people.

1:17:05 – 1:17:21

This is not in my notes, but it jogged a memory of encrypted messages. You know, I'm always, oh, they can't get into this, it's encrypted. And then there's some kid in a garage in Califor- Southern California who's figured out how to do it in about fifteen minutes. Is there anything truly encrypted in your opinion?

1:17:23 – 1:17:40

Uh, Representative Burchett, we could go into uh greater detail on that particular topic, but not necessarily in this form that I would wanna bring back to you from my my role in INS, INS correction, uh a more fulsome picture on that, perhaps in a in a in a close setting in in the in the picture.

1:17:39 – 1:17:43

Okay. Let me, can I ask one more question, Mister Chairman, I've run over just a minute.

1:17:42 – 1:17:43

Yes sir.

1:17:43 – 1:17:59

Mm, yes sir. Thank you brother. Um. What do you think, what is your all's plan? on getting everything on track for the next three years. Do you have a plan? I mean, I don't want you to disclose any secrets, but, and do you feel like you can ob- ob- obtain those objectives?

1:18:01 – 1:19:10

Yes, I do believe that we can attain the objectives, and the plan r- relies on a couple parts. First, going back to what our, our GAO colleagues have talked with us about, we, we will and we must get our hands around a detailed schedule that enables the agency itself to hold itself accountable and for our oversight partners to hold our uh us accountable um that is a non-negotiable we will achieve that in the coming months and I very much look forward to coming back um either as acting director or in my role uh in my oversight role in INS to report to you and your colleagues about the progress that we've made there in addition though we do have to change the culture of the organization like I talked about earlier, we have to be adaptable. We have to be flexible, and we have to um take on an attitude um that our primary responsibility is to provide decision makers with risk informed information so that they can make assessments about the trustworthiness of their their workforce.

1:19:11 – 1:19:33

Thank you. Thank you, Mr. Chairman, and thank you again for letting me go over. I wish more. would allow us to do this because and i appreciate the relationship that you have with the ranking member because um i think more committees could probably fashion a little bit more of their attitude towards us lower level members uh the if they'd probably you your two leads so thank you all

1:19:35 – 1:19:48

i thank the gentleman from uh tennessee and will tell him that mister nfume and i intend to maintain this relationship for the benefit of not only members but also the american people

1:19:48 – 1:19:56

mr. chairman i would also like to say i i tend to like mr. Mfume more than i like you and i just want to say that for the record keep that off the record though

1:19:57 – 1:20:08

the gentleman is not recognized for more time uh in fact uh tim it is uh with great respect that you offer that feedback because

1:20:08 – 1:20:09

right

1:20:08 – 1:21:40

mr. Mfume in my opinion is an outstanding example of collegiality and something which uh I think as as Mister Burchard noticed is desperately in need here on a regular basis and so thank you very much. I'll now uh yield myself to uh such time as I may consume. The opportunity to have both of you here with what I consider to be outstanding or sterling uh insight an ability to accept as I say you you're accepting the role Mister Overbaugh and the responsibility and the good things and the bad things uh Misses part of what we're talking about today we don't always get down to brass tacks but what Mister Overbaugh has spoken about is his analysis which I do accept, appreciate and respect about how professional they are, about their ability to do their work. He did, comma, suggest that there are some things that still need more tinkering with more reliability. Do you get into those management personnel type things of frailties of outcomes that he spoke about?

1:21:42 – 1:22:14

I would say that the progress with NBIS is very recent and so it is fragile. Um, sustained leadership attention is critical uh for the program to continue to make the improvements that it has done recently, and then continue to implement the recommendations that GAO has made for several years to have a schedule to make sure the oversight mechanisms are in place to marry up those milestones with trusted workforce two point O so we're not seeing continued slippage down the road.

1:22:14 – 1:22:14

K.

1:22:14 – 1:22:29

So it's important to not take you know to to this is great that there is some progress um but I would agree with Mister Overbaugh, it's recent and it is fragile if we don't have the leadership and oversight mechanisms in place.

1:22:30 – 1:23:04

Mister Overbaugh, the discussions without naming names but do you find that there are people within the organization who uh are not interested in its success in mastering the time frames and allowing slippage that they were seemingly happy with their performance that you've described why did this even slip months and were those people spoken to realistically or simply

1:23:11 – 1:24:01

Chairman Sessions, I would tell you that ninety-nine point nine percent of the workforce today is absolutely passionate and capable for the task that we have in front of us. I did find uh some individuals who embodied a culture of wanting to maintain the status quo. where we find those individuals, we will um take the opportunity to give them a chance to serve in another capacity. But for DCSA moving forward, we need a team that is one hundred percent dedicated to the mission, that understands that we are uh have a critical mission, and that we use, we achieve that mission um through the hard-earned dollars of the American taxpayer.

1:24:02 – 1:24:39

OK, let's stay on this pathway, please. You mentioned that you have offices, different people in a hundred and sixty some different locations. Do you have metrics on them and are they part of the slippage? Or is, are we talking about systems that they enter data into, that then talk to people looking for more uh back and forth to then agree to that and then move is it system oriented or have you, do you have a metric that determined it was people also?

1:24:42 – 1:25:29

One of the things I recognize that we need at DCSA is a v- is a way to visualize the performance of our entire organization succinctly and clearly. We don't have that today. That's one of the things that I'm working on internally to the organization. To be able to see for example from cradle to grave how our investigative processes are going. Um, we have some of that picture right now, and the team does a very good job of providing that data, but we can do much better. It will enable us to find those areas in the funnel where we have clogs or where we have uh obstacles that as leaders we can first identify how we can remove those obstacles for our teammates. And if it ends up being a personnel challenge, we can address that as well.

1:25:30 – 1:25:31

So what have you found?

1:25:34 – 1:25:36

As it relates to what in in particular, Mister Chairman?

1:25:36 – 1:26:18

The delay of your hundred and sixty uh different offices. You're seemingly would have an idea that you have a problem or don't have a problem or ha- can set a standard that seemingly could be established rather quickly if that is the issue. Once again, it's hard for me to know if that is the issue people oriented responses uh decision making moving things along or whether it's correspondingly in the processes of systems that then do not effectively provide the information to decision making. Mrs. will you answer that

1:26:20 – 1:26:34

Our work has found that it has mostly been in the lack of basic program management principles. again not having a reliable schedule for the program we do know that dcsa has taken some efforts even before mr. overbaugh

1:26:34 – 1:26:37

so you're worried about headquarters

1:26:34 – 1:26:35

yeah

1:26:37 – 1:28:18

decision making for fixing the systems that people operate within i was asking him and we'll get here the people who do these the work And then that process is it then the systems that are causing the delays. And so I wanna then focus on the hundred and sixty offices that you're evaluating, and yet the systems or tools by which they have to operate whether where where are the issues that you found. And that could be some of both. But this is where then I wanna come to Ms. Ciz and say, say, you have and GAO has a broader viewpoint than just this organization on how to effectively deal with management systems and structures and try and work with them to find a how to update which comes first, which vendor comes first, which vent- which system needs updating, which s- system needs new standards or procedures. So let let me go back and have you both, feel free, once again we're trying to get the bottom of this. You went out and visited some offices. And you had an opportunity which is very professionally oriented and good. What did you find out there?

1:28:20 – 1:29:03

I I found both, Mr. Chairman, quite frankly. I found uh a dedicated workforce, but one that suffered from lack of our technology integration, and one that also unfortunately at some layer l- areas in management was too oriented towards the status quo. That's why the recommendations that the GAO has made to us about uh tools like the critical path and the risk schedule are so important because metrics will drive behavior within the organization. Once we have that clearer picture, once we have those metrics, we're going to be able to drive that cultural behavioral change in a much more effective manner but the short answer to your question,

1:29:02 – 1:29:03

So

1:29:03 – 1:29:06

Mister Chairman, was I found both.

1:29:06 – 1:30:06

Okay. So in other words, when you take on a particular issue, subject, a person, and you've got a request that may have been sitting there for a long time, you have then identified that we need certain data, certain information, processing of their form, verifying the data and information, uh, touching base where an investigator will move forward, getting that investigator's recommendation, looking at feedback that others provided, and then sifting through that And then placing that into some sort of system where that is then vetted properly. That is people oriented, no? No it's really system too, because if you got a system problem, they're not able to effectively do that. Is that what you also have, a system problem?

1:30:08 – 1:30:11

I- in the sense, if I understand your your your concern.

1:30:11 – 1:30:38

Well you put your data in something. that would be reviewed by you decide how many, but several people. It's not just a one-person process. You've got an investigator that goes out and they put their data and information. Is that a problem of getting that data and information? Uh, well, we're dissecting this now in this subcommittee. Is is that a problem? Because it seems like that may be part of your daytime job.

1:30:40 – 1:31:10

Yes, Ch- Chairman Sessions, and what I would say is that's the - the - the problem that you're highlighting is the exact reason why we are - we are - why it's so important that we - we get MBIS online so that we're able to achieve the goals laid out in trusted workforce two point zero as it stands right now from a system standpoint we're using old and antiquated technology I think developed in the eighties in order to do the task of personnel vetting.

1:31:11 – 1:32:20

And we hear that, and that's that two and a half billion dollars, and then the need to update it or make it work, two and a half billion. My my point is, are you looking for the director to cut through that and say, we are going to do this until we get that done ten years? I'm worried about the ten years. I mean, you may not have what you're asking for for. ten more years. And I'm asking you, how are we gonna do that? And then look at it, miss this, say, do- doesn't the GAO, I think the answer is yes, doesn't the GAO have some recommendation of which one of these systems may need to spend, I don't know whether six hundred million, I don't know what it is, to update it, to make something happen, if not a relationship that you've identified to getting data quicker and faster, even though it's not the Imbiss delivery. It's an interim step. Somebody's got to do that. We cannot wait ten years. Mr. Mfume and I will not wait ten years.

1:32:21 – 1:32:21

Yep.

1:32:21 – 1:34:58

Will will you? And that answer is no. I know you're you're very uh uh glib at understanding and nimble at understanding this, but I still have not heard back OK, we got a problem here, we know we've gotta fix that. We got good people, but this system, this one right here has to be updated for these other factors to work. And then Miss is to be able to say Yes, yes, I think that's right. That we've gotta do this, this, this one first, this one second, this one third over the next year to better the lot where we are. That's what I'm looking for. I think that's what mister and i are looking for not well we're gonna wait ten years well we got good people but we got a systems problem what the heck are we doing to work together to say we're going to update this one thing which is uh uh in material to the work that's gotta be done i don't want something out there done i want something in here i've unfortunately been around enough in life where I have had to wait on computer systems. But we did, we we understood when that was gonna happen. So, get ready for this next round when you're back. I wanna know what systems, I don't need to know the vendor, I don't, you don't need to do a follow chart, but that you have taken the five or four most critical systems. And they are on-line, who you are with uh standards and procedures and uh, an understanding about what they're supposed to do and go get that darn thing done. I mean, uh, we're not looking at paint drying. And we're not gonna do that. So, uh, and likewise, I don't think Mister Mfume and I wanna manage your job, either one of you. We wanna provide oversight. We wanna make sure, as you talked about, and one of the best things you said today was, we gotta ba- get a person with the bandwidth. the bandwidth not to sit back and say, uh, I I can't get my job done because my boss is always gone. Clear lines of authority, delegation authority, clear lines of responsibility, uh, time frames that are professionally established to be met, not to slip, and I I just think that this has got to be done. Mrs., can you make sense of what I've said?

1:34:59 – 1:34:59

Yes, I did.

1:34:59 – 1:35:26

Do you have the desire and ability to understand the systems that if he talked to you or you know where they are, what the problem is, and provided feedback back to them to say, we think this system is the first that needs to be updated, not waiting for Imbus. This is a a backlog or a clog or a a bottleneck in the system. Do you think you have that level of detail?

1:35:27 – 1:35:35

So those are what the recommendations we've made in our written statement go toward. The sequ I'm sorry, the sequencing of events, right?

1:35:34 – 1:35:35

Sequencing.

1:35:35 – 1:35:50

And that's that was our whole point here, that the INVIS program has been focused on an agile program, very focused on near-term gains, that they're not looking at if a milestone slips here, what is the effect of it down the road,

1:35:50 – 1:35:50

Yeah.

1:35:50 – 1:36:11

right? So and that's what Mister Overbaugh, I believe, wants that visibility and talked about having that visibility for him at the leadership level too. So he can take action, but he doesn't have that information right now, because the NBIS program does not have a schedule set up to be able to sequence those events to be able to identify risks and then to be able to take action,

1:36:11 – 1:36:13

And how can we say it's gonna be done in ten years?

1:36:11 – 1:36:13

to target it for those systems.

1:36:17 – 1:36:21

How can you say you've got a schedule of ten years, yet if you don't have that schedule?

1:36:22 – 1:36:32

Well, uh, Chairman Sessions, we don't have ten years, we have a couple years, and we are charged with delivering trusted workforce two point zero by fiscal year twenty twenty eight.

1:36:32 – 1:36:33

Right.

1:36:33 – 1:37:17

And I'm quite confident that we can. To to address what I think uh one of the things that you're talking about is this. Aside from in this, in our current procedures, do we have the ability to generate trust decisions for our workforce? And the answer to that question is yes we can. We are operating with legacy systems. But we do have dedicated professional teammates who have experience with those systems, and all the associated bolt-ons that go with it, to provide those those trust decisions. We're not where we want to be, and as we implement uh and integrate in this, the team is looking at continual improvements that we can make to the process.

1:37:17 – 1:37:21

So would that be against the eighty percent model that Ms. Cis spoke about?

1:37:22 – 1:37:28

the eighty percent model you are eighty percent inefficient, is the way I took her comments.

1:37:30 – 1:37:31

Uh, I would I would need to hear again, ma'am.

1:37:31 – 1:37:32

Right,

1:37:32 – 1:37:32

Uh

1:37:32 – 1:37:38

it's it's the time for taking for granting top secret clearances is eighty percent longer than the government school.

1:37:38 – 1:37:39

I mean there that is

1:37:38 – 1:37:42

It's just one number that she threw at me.

1:37:42 – 1:37:43

Right, it's one dateable.

1:37:42 – 1:37:57

Ye- Yes, yes, Mister Chairman, and that is a concern that we've had and I am encouraged by the work that DCSA has done to get down the investigative backlog. to a number that is more acceptable. Um, I think we spoke the other day on the fact it's about a hundred thousand now.

1:37:57 – 1:37:57

Yes, you did.

1:37:57 – 1:37:59

The team thinks that it can get to about seventy

1:37:59 – 1:38:00

Seven.

1:37:59 – 1:38:46

thousand as part of a a normal workflow process. Um, but we're also looking at things like the better that we get on the investigative side, we have to s- to make sure that we're not, um, overburdening the folks that do the adjudication. There are inter- interoperabilities and, and uh, and relationships between those two tasks that will impact one another. So, I am absolutely focused on the concerns that you're raising. Um, and again why I would go back to the fact that I recognize that the progress that we've made is exceptionally fragile, and we're gonna have to stay laser focused on this. I agree. We can't wait another ten years. We've already spent way too much of the American taxpayers' dollars on this problem, and we are committed to delivering this capability by FY twenty twenty eight.

1:38:47 – 1:41:45

it would be um appropriate for me to recognize that both of you are, as i've said in the past, very professional, very inward-looking, and attempting to focus on these things. I I wanna put you in a position, however, that adds a little bit of fuel to the fire about decision-making that you and the the department have to make. And you and I spent a little bit of time on that about some of the intricacies, some of the uh problems of marrying up, who will take the job, who's got the background. Um I will just say to you that something's got to happen there. We we want the next person, as you have openly said, I'll accept the responsibility. And I think that's magnanimous. I'm delighted, uh, as opposed to not my problem. But time clicks on. This committee will not become frustrated. Mr. Mfume and I are not frustrated. We wanna hear progress that's on both sides, and that is that the GAO has a responsibility as our arm to look at this. I just simply think that there are things that he and I need to get into to see the incremental progress that we're gonna need to see that the decision making that was done did better itself over some small period of time. And it could be the things that you've delineated, you have delineated, look, we've been out and talked to people. We had a problem with some personnel that were satisfied with, uh, not moving the ball forward. Uh, we have made decisions. We are l- least of all, I think, concerned about, uh, being nice to people but getting results. And I think Mister Nfume and I do recognize there's always a room for someone else to move, or if you've got a problem, to move them somewhere else. And for them to take that as a lesson, a learning opportunity, perhaps they're better position to do something different. But not to get in the way, and not when you've accepted responsibility, I expect you to be able to have the bandwidth to pull that off. Notwithstanding, uh, a myriad of federal laws. Okay, employment laws. One last point that I would like to ask. Do you have a handle on your people, meaning the people in this organization, some thirteen thousand? of them reporting to work by the president's uh directive in january of twenty five

1:41:48 – 1:41:51

uh i'm aware of no uh violations of the president's directive

1:41:51 – 1:42:01

so you believe that you report which uh you're required to do report to uh office of management and budget that your employees are back at work

1:42:02 – 1:42:08

yes uh as far as i know now mister chairman that's true and if if uh if i'm misspeaking i'll I would definitely report to you.

1:42:07 – 1:42:25

Okay, you're you're entitled to to revise that. But if you would please go back and double check that. Uh, in some areas of the government we still have uh a larger number of people, and it's dragging down the organization's ability to effectively meet its goals too.

1:42:25 – 1:42:27

Gladly, I'll take that back, Mr. Chairman.

1:42:26 – 1:42:30

Good. Mr. Mfume, do you wish to have further time?

1:42:32 – 1:43:25

Chairman, yes, I've got a question i guess that just always pops up when we are talking about this agency and um there's an old saying that goes the hairier i go the behinder i get which was the way people used to characterize frustration just spinning wheels spinning wheels spinning wheels and thinking about that mister i wanted to ask you are you aware if the secretary has sent from on high a directive all the way down to the thousands of people that work for you and all that are on your level, that he wants in place a permanent director of defense, counter-intelligence, and security agencies. Uh, talking about secretary Hegseth.

1:43:26 – 1:43:40

Remember, I'm Fume, uh, I can, I can assure you that, that through the leadership of secretary Hegseth and my boss, uh, Mister Hansel, that the selection for a permanent DCSA director is a top priority.

1:43:41 – 1:43:51

Right, but has he sent that word down to the many, many minions and ranks below him as a directive from his office as secretary that you may be aware of?

1:43:52 – 1:44:06

I'm not aware of that communication, um, but I do know that, uh, Mister Hansel views this as one of his top priorities and he has been looking for the person to insure that the progress that we've made continues forward.

1:44:07 – 1:44:18

So let me ask you another question because about my frustration with the department at times. Are you aware the department has failed seven or eight straight audits?

1:44:20 – 1:44:20

I am.

1:44:21 – 1:49:04

So that's very troubling to me. And I'm sure it's troubling to the chairman of this committee. Because we just don't understand that. seven or eight straight audits, year after year after year, with a budget that shrinks any other budget that's out there. And, um, one of the things that I tried to do in dissecting that, and GAO was very helpful, I wanted to know what were the components that sort of led to that. And what we learned was that there was not a problem with the Marine Corps. they for the last three or four years have figured it out, gotten it done, and it wasn't a knock against the army, the air force, uh, or - or anyone else, but we asked through GAO what was the single most important feature that caused the marine corps to do what others had not been able to do. And the answer was that there was an order on high. from the commandant straight to everybody below him, " This is a priority, get it done." And they got it done. So I asked the question about the secretary because I think if there was a directive from on high straight down, that says " This is a priority, get it done," it would get done. Now, you can't respond to that because you're not the secretary and casually, and not so casually, we've always said to him that This committee is wide open to receive him at any time uh that he'd like to come by and talk about uh that or anything else. And I just wanna reaffirm that that's the case today. But in the absence, in my opinion, of a clear directive from the secretary that this is not only a priority, but I wanna get it done, I think we are kind of treading water and one month turns into the next, and the seasons change and the years change. And here we are now, uh, aside from eight straight audits that have been failed, here we are now one hundred percent over budget, years beyond where we should be. So that's not for your ears to God, it's for the secretary's ears to God, if I hope that he will understand why this is so very important, and why in this case he's the man, as they say. He can get this done. There's nothing that the United States government cannot do. I honestly have always believed that. And I don't know to what extent beyond you, people have gone to him and said, "This is an exp- this is exposure here. It - this is not good. Eight straight audits, one hundred percent over cost, ten years behind schedule." Um, so I wanna thank you for your - your work, uh, previous to November and your work since November. And thank you also for wanting to own some of the issues that predated you. But as I said before, at somebody else's ownership, we will be looking at you from November on, obviously, and hoping and wishing that things change, which is why I was particularly encouraged to hear the GAO say that there have been some improvements and there's some things on track, and for us to talk about a schedule and trying to get something before this committee again in in March or or April. Um. And I wa- I wanna wish you well. My sense is that we'll be having this discussion again, uh, when the chair decides to call us together again and maybe incrementally we can designate or pinpoint some sort of progress. And Miss Shiz, thank you also. I really wanna thank the GAO. I don't wanna call you the police, but you have done a great job of policing agencies throughout this government, and um, I'm gonna be hardened by your words as I said a moment ago that you have seen some uh improvements here and we've gotta make sure that every time we meet we can say that and I really hope Mister Secretary if you're listening that you would uh contact the the chair of this committee and myself we'd love to talk with you uh not to sling arrows but to try to figure out how do we put our finger in the dice to stop this amount of money going out and creating a security situation for the United States and its people and agents all over the globe that none of us want and none of us want to see come to pass. So, Mister Chairman, you've been very generous, as the uh gentleman from Tennessee said earlier. He's gonna like you more than he likes me. It's just a matter of time.

1:49:04 – 1:49:05

Well,

1:49:04 – 1:49:06

But uh thank you.

1:49:05 – 1:51:42

I've got I've got a little bit of time on my side and I wanna thank the gentlemen. Uh if I could say that one of the things that disturbed us is we did not hear have had back a letter that we sent to the secretary i did not see a response and members of congress that comes from from subcommittees like ours where we attempt to approach things on a bipartisan basis to keep it level to keep it professional would be appreciated to when we send a letter to hearing something back. And I find it in a a way that Mister Mfume has been gracious about that. I don't write letters for the Department of War. I write letters to them. And I think that if there's one thing that you or the chief of staff uh, Mr. Hewitt's here would take back to some bit of people. And that is when we get a letter, we should respond back professionally, or at least respond back, we don't intend to. Too bad, we will wait to find out. It may take uh seven more months or ten more months. But that letter was sent with good intent. And for us to maintain a professional standard of business that Mister Nfume insists on and I do too. I think that that open communication extends also beyond you, sir. I wanna thank our witnesses for being here today. I wanna thank the time, your staff. I wanna thank our staffs. We have been spent a good bit of time on this issue. And as Mister Mfeme said, we're not going away. I wanna thank everyone for being here today. I want to move to my where I've got to uh state and close in, I wanna thank our witnesses. There's a five day, there it is. So with that said, without objection, all members have five legislative days within to submit materials. and additional written questions for the witnesses which will be forwarded to our witnesses if there is no further business without objection so this meeting stands adjourned

Morning digest

Start every morning briefed on yesterday’s hearings

A free weekday email covering yesterday’s hearings and transcripts newly unlocked in the archive.

Free weekday email. Unsubscribe anytime.