 And although the root cause of the cyber incident involved a vendor's systems and not VA's own, McDonough says the change healthcare episode served as something of a wake-up call, prompting the department to take new steps to shore up its own defensive posture. We're being more vigilant about training, including very regular training