The GAO Report Confirms the DOGE Story
GAO’s April 28, 2026 report on DOGE access at Treasury is more than a technology story. It is a federal employment story about what happens when career employees are asked to move faster than the rules allow. GAO found that the Bureau of the Fiscal Service, which processes major federal payments through Treasury systems, gave a Treasury DOGE employee access to payment systems between January and February 2025. That access included the ability to view, copy, and print data from three payment systems, and the employee could read source code for several systems.
“Read-Only” Still Requires Controls
For federal employees, the practical takeaway is simple: do not let labels like “read-only,” “temporary,” or “urgent” replace process. GAO reported that the employee had not completed required security training before receiving access to sensitive payment systems, and BFS did not ensure that the employee signed the required IT rules of behavior before access was granted. GAO also found that the employee was mistakenly given read/write access to the Secure Payment System for about one day, although GAO found no evidence that the access was used to change data.
When the System Misses a Risk, Your Record Matters
GAO also found that Treasury’s data loss prevention controls were not configured to catch certain transmissions to other federal agencies. As a result, an unencrypted file containing USAID payment information for more than 350 individuals was sent to two GSA DOGE team members without BFS approval, and officials identified the incident only later during a forensic review of the employee’s laptop.
If you are the employee asking, “Where is the approval?” or “Has the training been completed?” you are not being obstructionist. You are creating the record the agency may later need. Keep your tone neutral. Ask questions in writing. Save policy citations. Document who requested access, what was requested, what approvals were missing, and what risk you identified.
Mindfulness Under Pressure Is Not Passivity
When leadership pressure rises, the nervous system wants speed: comply, avoid conflict, survive the meeting. A mindful pause creates space for lawful judgment. Before responding to an irregular request, take one breath and ask: “What rule governs this, and what record will exist tomorrow?”
Federal whistleblower law may protect disclosures involving violations of law, rule, or regulation, gross mismanagement, gross waste, abuse of authority, or substantial and specific danger. It also protects certain refusals to obey orders that would require violating a law, rule, or regulation. Sensitive, classified, or protected information must be handled through lawful channels such as an Inspector General, OSC, Congress, or authorized agency channels.
The GAO report’s central lesson is not panic. It is steadiness. Rules protect the public, but they also protect the employee who can show they followed them.
Legal Disclaimer: The information provided in this article is for informational purposes only and should not be construed as legal advice. While I am a federal employment attorney, this post does not create an attorney-client relationship. Every situation is unique, and legal outcomes depend on specific facts and circumstances.