A security system is only as convincing as its inspections. The Defense Counterintelligence and Security Agency oversees how defense contractors access and safeguard classified information. Yet a 2026 Government Accountability Office report says the agency was conducting fewer than 40 percent of required contractor-facility inspections.
What the watchdog actually found
GAO examined weaknesses in the Defense Counterintelligence and Security Agency’s management of its industrial-security mission. It cited workforce shortages, problems with information technology and gaps in systematic risk management. According to the report, the agency performed more than 4,600 security reviews in fiscal 2025, but that activity did not amount to completing its full required inspection workload.
Why an inspection gap matters
Contractors hold sensitive programs, information and technical knowledge. Incomplete review can leave unresolved vulnerabilities or make it harder for oversight personnel to understand changing threats across locations. That is a statement about risk, not evidence that any particular contractor stole or leaked classified information. The report does not justify accusing unnamed companies of espionage.
The questions worth asking
How does the agency prioritize high-risk facilities when it cannot visit every required site? Can improved analytics and staffing close the gap? How will Congress and the department measure improvement? GAO’s recommendations emphasize more effective risk management and engagement with the affected stakeholders. Any future progress claim should be checked against measurable, published follow-up results rather than agency assurances alone.
Featured photograph shows the Arlington, Virginia, area near the Pentagon, not an inspected contractor facility.
