Republican lawmakers warned the Department of Education’s chief information officer Tuesday that his failure to improve cybersecurity at the agency is setting up the possibility of a major data breach, like the one the Office of Personnel Management was forced to admit last year.

Danny Harris, the departments CIO, testified before the House Oversight Committee, where he was grilled over his failure to improve a cybersecurity system that was given the grade of “F” on a cybersecurity scorecard. The agency also saw cyber standards fall further during a period last year when agencies were supposed to be ramping up their protection from hackers.