Audit

July 26, 2019

Audit of the DoD’s Management of the Cybersecurity Risks for Government Purchase Card Purchases of Commercial Off-the-Shelf Items (DODIG-2019-106)

Publicly released: July 30, 2019

We determined whether the DoD assessed and mitigated cybersecurity risks when purchasing commercial off-the-shelf information technology items. Although we primarily focused on Government purchase card purchases, we also assessed risks affecting traditional acquisition processes.

As required by law, attached to this report are responses received from one or more non-governmental organizations or business entities that are specifically identified in the report.

July 23, 2019

Audit of Protection of DoD Controlled Unclassified Information on Contractor-Owned Networks and Systems DODIG-2019-105

Publicly released: July 25, 2019 We determined whether DoD contractors implemented adequate security controls to protect DoD-controlled unclassified information (CUI) maintained on their networks and systems from internal and external cyber threats. CUI is a designation for identifying unclassified information that requires proper safeguarding in accordance with Federal and DoD guidance.

July 23, 2019

Project Announcement: Audit of Munitions Storage Facilities in the U.S. European Command (Project No. D2019-D000RH-0186.000)

We plan to begin the subject audit in July 2019. The objective of this audit is to determine whether the DoD stored and secured its munitions in the U.S. European Command in accordance with applicable policy. We will consider suggestions from management on additional or revised objectives.

July 18, 2019

Audit of Air Force Accountability of Government Property and Oversight of Contractual Maintenance Requirements in the Contract Augmentation Program IV in Southwest Asia DODIG-2019-103

Publicly released: July 22, 2019 The objective of this audit was to determine whether the Air Force accounted for Government-furnished property (GFP) and provided oversight of contractual maintenance requirements in the Contract Augmentation Program IV in Southwest Asia. We reviewed four Air Force Contract Augmentation Program (AFCAP) IV task orders in Kuwait, Qatar, and the United Arab Emirates.

July 17, 2019

Project Announcement: Audit of DoD Military Treatment Facility Safety and Security of Radioactive Materials (Project No. D2019-D000AX-0183.000)

We plan to begin the subject audit in July 2019. Our objective is to determine whether DoD and military medical treatment facility management properly trained personnel, conducted inspections and program reviews, and accounted for inventory levels for the safety and security of radioactive materials. We will consider suggestions from management on additional or revised objectives.