Quis custodiet?
"As of today the scope of DOGE's access only seems to be expanding," the letter continues, adding that despite its growing grip on the federal bureaucracy, Congress hasn't been told who has been hired, how their regulatory authority has been granted, or how the group "is vetting and monitoring its staff and representatives before providing them seemingly unfettered access to classified materials and Americans' personal information."
Every security professional's nightmare - people you don't know, whose security clearances you cannot check, and whose IT equipment has not been issued by someone who can provide security assurances, gaining physical access to your sensitive storage, complete with their mobile phones, smart-watches and heaven knows what else.
I worked for a while in a genuinely secure office. All electronic equipment (except, presumably heart pacemakers) had to locked in safes outside the room. There was a vestibule area. No-one was allowed to take IT equipment out of the office (unless authorised by SysAdmin).
You simply do not allow unaccredited people access with their own laptops to that sort of system.
https://www.theguardian.com/us-news/2025/feb/06/trump-musk-support-poll
"
In a letter published on Thursday, the members of the House oversight committee say they are worried that Musk and his operatives have illegally accessed classified information and sensitive personal data at agencies including the office of personnel management (OPM), the US treasury and the US Agency for International Development (USAid).
“There is no evidence that he, or any of his associates working under the ‘Doge team’ moniker, are entitled to access our government systems, nor is there any evidence that they have undergone the proper vetting to ensure the security of taxpayer and government data,” the letter said.
"
As a former System Administrator and Information Security consultant to UK Government Departments, Agencies and their suppliers, my sympathies lie with the staff trying to implement and follow their Departmental security procedures. I can only hope that the DOGE employees have not brought in any malware.