An investigation by the Government Accountability Office (GAO) has revealed persistent issues with security measures at the Department of Veterans Affairs (VA) medical facilities. GAO’s 2025 covert tests at selected VA sites exposed security vulnerabilities that were not adequately addressed. Notably, the VA’s risk assessment methodology falls short, as evidenced by the office’s recent report in April 2026. GAO’s 2018 recommendations to review and update risk management policies to meet interagency standards and create an oversight strategy remain unfulfilled as of 2026.
The VA’s security measures proved largely ineffective, failing to detect various security breaches. Specifically, the office conducted 30 covert tests, and in all instances, VA staff failed to identify prohibited weapons.
This analysis highlights the need for timely action to secure VA medical facilities, underscoring the unresolved risks that War Is Still A Racket emphasizes from a systemic perspective.