GDIT has outsourced much of its HR functions. The company they selected was occasionally unprofessional and difficult to deal with. Their security management processes, for example, is a disaster. When the service company called GDIT employees (in response to the GDIT employee's service request), they required that the GDIT employee provide their username and password into the HR system. If *I* called *THEM*, that would be acceptable; however, this implementation of identity verification IS EXACTLY THE EXAMPLE USED in many companies' anti-fraud/information security training. NEVER divulge a system username/password to someone on the phone WHO CALLS *YOU*. And they NEVER got it...