The Office of Personnel Management is objecting to a report from federal auditors that its cybersecurity practices are lacking, and says the auditors held back on providing the agency with critical information.

The report, issued on Tuesday by the nonpartisan Government Accountability Office, found the agency’s systems lacked appropriate access control. OPM responded in a statement later in the day, saying the GAO had withheld information about its assessment of OPM’s “boundary protection” and “authorization” vulnerabilities.