46 articles · Operations & Workforce · page 1 of 3
Articles
Week of 26 October 2026
OPM’s staffing-plan rule tucked a systems certification into a personnel regulation
OPM’s October 29 rule made workforce planning a quarterly data feed, moved the employee survey to agencies and had agency heads certify that their systems let HR leaders see the workforce. CIOs will carry much of it, on HR systems awaiting replacement.
Week of 21 September 2026
Agency certificates now expire faster than agency budgets turn over
On October 1, 2026, the first day of the federal fiscal year, the first full-term 200-day website certificates ran out. Agencies built to buy, staff and schedule them once a year had to rethink all three.
Week of 29 June 2026
July 1 in teaching hospitals: thousands of joiners, movers and leavers in one week
Every July, US teaching hospitals welcome a wave of new doctors, promote others and say goodbye to graduates, all in one week. It is the biggest identity and access event of their year, and its four parts each fail in their own way.
Week of 25 May 2026
Faster settlement, longer nights: what two years of T+1 tell Europe’s operations desks
America’s move to one-day settlement held because firms automated same-day trade matching and rethought who works when. Europe and the UK follow in October 2027, and the shift patterns and funding arrangements will be harder to build than the software.
Week of 30 March 2026
What payers’ first prior authorization numbers needed from providers to be useful
By March 31, 2026, health plans had to publish how often they approve care requests and how fast. The numbers were rates without volumes, averaged across whole books of business, and only became useful once a health system added its own counts.
Week of 9 February 2026
What a second CISA lapse in five months asked state and local security teams to own
Homeland Security’s funding lapsed on February 14, and the nation’s cyber defense agency paused much of its help to states and localities for the second time in five months. Local leaders now had to decide which work to take on, buy or keep borrowing.
Week of 26 January 2026
A two-year telehealth runway is long enough to build on and too short to bet on
After yet another lapse in late January, Congress extended Medicare telehealth through 2027 and hospital at home through September 2030. Health systems can finally plan, but only by sorting each virtual service by how long its legal footing lasts.
Week of 29 September 2025
How the lapse of a 2015 law put counsel in the threat-sharing loop
The 2015 law protecting cyber threat sharing expired as the October 2025 shutdown began, and sharing did not stop. But every warning sent outside the building picked up a legal question, and teams without written rules found analysts waiting on lawyers.
Week of 14 July 2025
An escort who cannot read the command is not a security control
ProPublica’s report on Microsoft’s “digital escorts” showed that a cloud authorization says little about who actually runs a system. Agencies need personnel terms they can test: who can touch the system, how that work is checked, and what evidence reaches them.
Week of 12 May 2025
Cheap contracts, valuable access: the market behind Coinbase’s bribed agents
Coinbase’s May 2025 disclosure showed criminals simply buying customer data from outsourced support staff who could already see it. Insider risk in support operations behaves like a market, and financial institutions set its terms through how they buy and govern outsourced labor.
Week of 11 November 2024
FinCEN’s deepfake alert was a job-design problem for three groups of staff
FinCEN’s November 2024 deepfake alert read like a checklist for compliance teams. Its harder message was for the people whose jobs let them act on recognition: onboarding reviewers, service agents and payment operators each needed new authority, incentives and ways to escalate.
Week of 23 September 2024
Helene tested what continuity plans take for granted: staff, signal and signatures
Most continuity plans prepare for losing a building or a computer system. Hurricane Helene took away people, phone and internet service, and the officials who sign off on decisions, across a whole region at once. Each needs its own preparation, years ahead.
Week of 26 August 2024
Sea-Tac’s handwritten boarding passes were a staffing plan in disguise
Ransomware knocked out Port of Seattle systems, and the airport kept moving on paper and goodwill. “Revert to manual” turns out to be a promise about people: which work has a paper version, who does it, for how long, and who re-keys it afterward.
Week of 15 July 2024
Channel File 291 measured every recovery plan in hands per device
One faulty CrowdStrike update turned millions of remotely managed Windows computers into a hands-on repair job. How fast each organization recovered came down to three things few plans covered: access to recovery keys, people at keyboards, and the order of repair.
Week of 6 May 2024
Bigger network, thinner safety net: Ascension’s outage hit every sister hospital at once
In a big health system, hospitals cover for each other with beds, staff and shared services. When ransomware knocked out Ascension’s shared platforms across its markets, that safety net failed everywhere at once, and help had to come from outside.
Week of 26 February 2024
CSF 2.0’s biggest addition was the one a security team could not deliver
NIST’s refreshed cybersecurity framework added a new function called Govern. It looked like a technical update. In fact it hands work to executives, HR, procurement and the board, and organizations that left it to the security chief missed what had changed.
Week of 29 January 2024
Why CISA’s Ivanti disconnect order was decided by people, before it was issued
CISA gave federal agencies about two days to unplug and rebuild their Ivanti gateways. The steps were written down; people decided who made it: who could approve cutting staff off, who could rebuild the devices, and each agency’s place in a contractor’s queue.
Week of 27 November 2023
Ardent took one network offline, and emergency departments in six states had to answer for it
Over Thanksgiving 2023, Ardent Health took its network offline to fight ransomware. The decision was made centrally but felt locally, in hospitals carrying partners’ names across six states. Multi-state operators need those lines of authority settled before the next holiday weekend.
Week of 25 September 2023
Shutdown plans counted people; agency systems depended on contracts and expiry dates
The shutdown averted on September 30, 2023 still made agencies write plans for a funding lapse. Those plans counted people. But agency technology also depended on how each contract was paid for, what would expire mid-lapse, and how systems would restart afterward.
Week of 14 August 2023
A weekend of public red-teaming showed agencies that AI testing never finishes
In August 2023, members of the public spent a weekend at DEF CON trying to make leading chatbots misbehave. It was a demonstration, not a certification. For agencies buying AI, testing is ongoing work before award, before deployment and in operation, limited by staff.