On June 28, Jim Nicholson, secretary of the Department of Veterans Affairs, directed the assistant secretary for information technology to:
Establish standards for groups and individual employees to gain access to the VA’s information systems and deny access as appropriate. Order departmentwide compliance with all information security policies. Direct that any failures to comply with established information security policies be reported immediately to the chief information officer. Report any compliance failures or policy violations to the appropriate undersecretary, assistant secretary or other senior official for appropriate disciplinary action. Require senior officials who are notified of such incidents to inform the CIO about how they handled them.Source: Department of Veterans Affairs 
