Configuration management – especially vulnerability patching – is a significant challenge for many healthcare entities, including some Veterans Affairs medical facilities. A recent watchdog agency security inspection found configuration issues to be a top weakness at a VA healthcare system in Arizona.

The Veterans Affairs Office of Inspector General in a report issued Tuesday said a recent information security inspection of the Northern Arizona VA Health Care System found deficiencies in three security control areas reviewed in accordance with the Federal Information Security Modernization Act of 2014.