VA’s AI use to fix disability claims backlog sparks concerns from Congress, watchdogs

Overview

The VA’s expanded use of AI to address a roughly 600,000-claim disability compensation backlog has drawn scrutiny from Congress, GAO, and the VA Inspector General over governance and workforce impacts. Testimony and reports cite governance shortfalls, past technology failures at the VA, and workforce reductions of about 2,700 claims examiners since January 2025. Reports also indicate roughly 8,000 automated decisions contained errors or omissions, which raises questions about oversight, auditability, and human-in-the-loop review. For contractors supporting VA claims processing systems and AI implementations, this signals elevated regulatory attention and a higher bar for demonstrable governance, testing, and error remediation practices. Action is needed now to shore up governance, evidence of human oversight, testing and audit trails, and to prepare capture and proposal materials that address likely scrutiny. Use this Action Kit to triage immediate risks, align short-term testing and capture activities, and define longer-term compliance and governance upgrades. See Secure Operations Guide (/insights/secure-operations-guide) for implementation patterns and the related guides below for adjacent compliance topics.

Immediate Actions (This Week)

• [ ] Monitor official VA, GAO, and VA Inspector General publications and congressional testimony for updates, corrective actions, or new oversight directives affecting AI in claims processing.
• [ ] Inventory current VA-facing contracts, programs, and solutions that touch claims processing or AI workflows; tag systems that may be affected and identify points of contact for each program.
• [ ] Perform a rapid governance gap assessment of any deployed or proposed AI/automation components: verify existence of human-review pathways, error-logging, incident escalation, and basic audit logging.

Short-Term Actions (30 Days)

• [ ] Run focused test cases on AI decision outputs and automated workflows to quantify error rates and replicate the kinds of omissions cited in reports; document test plans and remediation steps.
• [ ] Update capture/proposal assets and compliance matrices to explicitly address AI governance, human oversight, explainability, and remediation processes so proposals preempt likely VA/oversight questions.

Long-Term Actions (90+ Days)

• [ ] Establish or mature an AI governance program (policy, roles, approval gates, monitoring metrics, and continuous testing) aligned to federal AI governance expectations named by oversight bodies.
• [ ] Prepare audit-ready artifacts (system logs, test results, human-review records, change-management history, and staffing/transition plans) to respond to GAO or IG information requests and to support future solicitations.

Compliance Checklist

• [ ] Align AI systems and program governance to the NIST AI Risk Management Framework (NIST AI Risk Management Framework).
• [ ] Prepare to meet OMB AI Governance expectations (OMB AI Governance) for oversight, roles, and risk documentation.
• [ ] Validate accessibility of user-facing tools and decision notifications against Section 508 requirements (Section 508).
• [ ] Ensure information system security and documentation meet FISMA and NIST 800-53 control expectations (FISMA; NIST 800-53).
• [ ] Maintain comprehensive audit logs, error/exception records, and human-review evidence for every automated decision that affects veterans.
• [ ] Document workforce impact and transition plans to show how automation maintains quality and oversight when staffing changes occur.

Resources

• VA — monitor VA and VA Inspector General reports and press releases for corrective actions and technical guidance.
• GAO — monitor GAO reports and follow-up products related to VA technology and AI oversight.
• Internal guides:
• Secure Operations Guide (/insights/secure-operations-guide)
• CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide)
• CUI (Controlled Unclassified Information)-Safe CRM Guide (/insights/cui-safe-crm-guide)

How Cabrillo Club Automates This

Cabrillo Signals War Room — Already detected this event and delivered this briefing within minutes. War Room continuously monitors VA, GAO, IG, and congressional releases and will push alerts when follow-up reports, corrective action plans, or prescriptive guidance are published. For your teams, War Room provides incident timelines and source-traceable evidence to speed responses to oversight requests.

Cabrillo Signals Match Engine — When oversight events like this change evaluation priorities, Match Engine automatically rescoring your opportunity pipeline and proposal priorities. It raises match scores for opportunities and solicitations that call out AI governance, accessibility, or extensive testing requirements and deprioritizes ones where increased scrutiny raises bid risk.

Cabrillo Signals Intelligence Hub — Intelligence Hub tracks affected agencies, NAICS segments, and contract vehicles for you and makes it simple to save searches that watch for VA solicitations or amendments related to claims processing and AI controls. Configure saved searches to alert capture and compliance owners when VA, GAO, or IG documents reference your core capabilities or when new solicitations appear.

Proposal Studio (Proposal OS) — Proposal Studio generates first-draft technical approaches and compliance matrices that explicitly address AI governance, human-in-the-loop processes, test plans, and remediation workflows using your past performance. The platform’s win-theme library and bid/no-bid decision engine surface objections raised by oversight events so your proposals answer them up front.

Proposal Studio Workflow Tracker — Workflow Tracker enforces a 9-gate capture process from opportunity identification through post-submission evidence retention. For events like this it automatically routes governance and security reviews to contracts and legal, tracks required artifacts (audit logs, test plans, human-review records), and assembles audit-ready documentation packages you can deliver to oversight bodies.

Explore these features in your Cabrillo Club console to automate monitoring, rescoring, proposal drafting, and audit-pack generation so you can respond fast to VA and oversight scrutiny.

Internal reading:

• Secure Operations Guide (/insights/secure-operations-guide)
• CMMC Compliance Guide (/insights/cmmc-compliance-guide)
• CUI-Safe CRM Guide (/insights/cui-safe-crm-guide)