Is the guidance under the Federal Acquisition Regulation enough or is some kind of contractual obligation in order?

The Government Accountability Office just put out a report on how three big agencies - the Defense Department, the Department of Homeland Security, and Health and Human Services - have been handling the safeguarding of sensitive information.

It finds, some more guidance is needed.

John Needham is the Director of Acquisition and Sourcing Issues at GAO.

He talked to the DorobekINSIDER about the changes GAO believes need to be made at the agency level to secure this sensitive information.