Agencies Promise Security Clearance Fixes Soon

Committee grills witnesses on security lapses that led to the Washington Navy Yard shooting in September. Committee grills witnesses on security lapses that led to the Washington Navy Yard shooting in September. Jacquelyn Martin/AP

Senate oversight leaders called into question the government’s security clearance process at a hearing Thursday, saying a lack of coordination and thoroughness led to recent leaks and tragedies.

The Homeland Security and Governmental Affairs Committee held the hearing in light of Edward Snowden’s mass leaks regarding the National Security Agency and the September Washington Navy Yard tragedy, when contractor Aaron Alexis shot and killed 12 people. A panel of witnesses from various federal agencies involved in issuing security clearances consistently spoke of efforts already under way to improve the process, but lawmakers continued to build pressure for dramatic changes.

“This is not a political issue,” said Sen. Tom Coburn, R-Okla., the committee’s ranking member. “It’s an issue of us failing to do our jobs.”

The senators repeatedly asked questions about how Alexis, who had a history of criminal and mental health issues, was able to receive a secret-level security clearance and access to the Washington Navy Yard. Lawmakers said they were “shocked” when Elaine Kaplan, acting director at the Office of Personnel Management, testified that as part of Alexis’ background check, the FBI found the Navy veteran had been arrested in Seattle, but investigators did not seek a police report on the incident.

Kaplan said Seattle police had previously told OPM they would not divulge their reports and instead referred investigators to an online database for the state of Washington, so in Alexis’ case, they simply went straight to the database. Because Alexis was never formally charged, OPM knew only that he was arrested for “malicious mischief” but was not aware that a firearm was involved, she said.

“We all missed something for sure,” Kaplan said, “but we did what was required.”

Joseph Jordan, administrator of the Office of Federal Procurement Policy at the Office of Management and Budget, said the security clearance process generally worked well, but added there is no room for error.

“We have 5 million people with clearances and the issues are very few,” Jordan said. “But any single point of failure has such monumental consequences that we have to make sure we don’t have a single one.”

Jordan discussed the interagency review initiated by President Obama after the Navy Yard shooting, saying he fully expects the group to meet its 120-day deadline and to issue recommendations in February. He added the review -- which involves OMB, OPM and the Office of the Director of National Intelligence -- will offer a forum to address many of the concerns the senators raised at the hearing.

Brian Prioletti, an assistant director at ODNI, said his office has been coordinating with other agencies for years to improve the security clearance process.

“Although these efforts are still a work in progress, when mature, they will eliminate many of these gaps and enhance the nation’s security posture,” Prioletti said. 

Many lawmakers at the hearing, however, have sought to take matters into their own hands by introducing a variety of bills to repair the security clearance process. Sens. Rob Portman, R-Ohio, and Jon Tester, D-Mont., introduced a measure to increase oversight of security clearances by allowing OPM to tap into its revolving fund to audit the agency’s management, employees and contractors who conduct background checks.  That bill has already cleared the Senate as well as the House Oversight and Government Reform Committee, and is awaiting a vote by the full House.

The senators called for the additional oversight after it was revealed the contractor that conducted both the Snowden and Alexis investigations -- USIS -- was under federal investigation for pushing through incomplete background checks. The Justice Department announced on Wednesday it was joining a lawsuit originally filed by a whistleblower against USIS.

At the hearing, Kaplan said USIS allegedly failed to conduct its own quality reviews on itsinvestigations, which resulted in contract fraud. OPM, however, still conducted its own quality reviews on the background checks USIS submitted. OPM has taken several actions to boost its contractor oversight, Kaplan said, such as increasing staff and conducting more audits.

Another proposal to come out of the committee -- from Sens. Kelly Ayotte, R-N.H.; Susan Collins, R-Maine; Heidi Heitkamp, D-N.D.; and Claire McCaskill, D-Mo. -- would require OPM to implement an automated review on every individual with a security clearance at least twice, at random times, every five years. The reviews would search public records and databases.

Brenda Farrell, testifying at the hearing on behalf of the Government Accountability Office, called on federal agencies and Congress to move beyond rhetoric and come up with a solution.

“Now is the time for actions, not just reviews,” Farrell said. 

Stay up-to-date with federal news alerts and analysis — Sign up for GovExec's email newsletters.
Close [ x ] More from GovExec

Thank you for subscribing to newsletters from
We think these reports might interest you:

  • Sponsored by G Suite

    Cross-Agency Teamwork, Anytime and Anywhere

    Dan McCrae, director of IT service delivery division, National Oceanic and Atmospheric Administration (NOAA)

  • Data-Centric Security vs. Database-Level Security

    Database-level encryption had its origins in the 1990s and early 2000s in response to very basic risks which largely revolved around the theft of servers, backup tapes and other physical-layer assets. As noted in Verizon’s 2014, Data Breach Investigations Report (DBIR)1, threats today are far more advanced and dangerous.

  • Sponsored by One Identity

    One Nation Under Guard: Securing User Identities Across State and Local Government

    In 2016, the government can expect even more sophisticated threats on the horizon, making it all the more imperative that agencies enforce proper identity and access management (IAM) practices. In order to better measure the current state of IAM at the state and local level, Government Business Council (GBC) conducted an in-depth research study of state and local employees.

  • Sponsored by Aquilent

    The Next Federal Evolution of Cloud

    This GBC report explains the evolution of cloud computing in federal government, and provides an outlook for the future of the cloud in government IT.

  • Sponsored by LTC Partners, administrators of the Federal Long Term Care Insurance Program

    Approaching the Brink of Federal Retirement

    Approximately 10,000 baby boomers are reaching retirement age per day, and a growing number of federal employees are preparing themselves for the next chapter of their lives. Learn how to tackle the challenges that today's workforce faces in laying the groundwork for a smooth and secure retirement.

  • Sponsored by Hewlett Packard Enterprise

    Cyber Defense 101: Arming the Next Generation of Government Employees

    Read this issue brief to learn about the sector's most potent challenges in the new cyber landscape and how government organizations are building a robust, threat-aware infrastructure

  • Sponsored by Aquilent

    GBC Issue Brief: Cultivating Digital Services in the Federal Landscape

    Read this GBC issue brief to learn more about the current state of digital services in the government, and how key players are pushing enhancements towards a user-centric approach.


When you download a report, your information may be shared with the underwriters of that document.