James Langevin actually said...

"I think best practices that I have seen in private industry have been around training programs where you actually create test-phishing campaigns."

"Your candor is very helpful and it helps us to understand the scope of the challenge and what we need to do to get this right."

"We really do expect and anticipate better communication from the Department moving forward on this issue."

"I share your concern about the clearance process."