The Department of Veterans Affairs (VA) did not set an adequate level of access controls for its Beneficiary Fiduciary Field System (BFFS), which put personally identifiable information (PII) and personal health information (PHI) at risk, according to a report released September 12 by VA’s Office of the Inspector General (OIG).
[…]