Audit

Aug. 5, 2019

Project Announcement: Audit of the DoD's Compliance With the Berry Amendment (Project No. D2019-D000AV-0193.000)

We plan to begin the subject audit in August 2019. The audit is mandated under section 2533a, title 10 United States Code. The objective of this audit is to determine whether the Military Services and the Defense Logistics Agency complied with the Berry Amendment for DoD procurements and acquisitions when purchasing materials and supplies. We will consider suggestions from management on additional or revised objectives.

Aug. 1, 2019

Project Announcement: Audit of the DoD FY 2019 Compliance With Improper Payments Elimination and Recovery Act Requirements (Project No. D2019-D000FL-0184.000)

We plan to begin the subject audit in August 2019. This audit is required by Public Law 111-204, “Improper Payment Elimination and Recovery Act of 2010,” July 22, 2010. Our objective is to determine whether, in FY 2019, the DoD complied with Public Law No. 107-300 “Improper Payments Information Act of 2002,” November 26, 2002, as amended by Public Law 111-204 and Public Law 112-248. We will consider suggestions from management on additional or revised objectives.

July 26, 2019

Audit of the DoD’s Management of the Cybersecurity Risks for Government Purchase Card Purchases of Commercial Off-the-Shelf Items (DODIG-2019-106)

Publicly released: July 30, 2019

We determined whether the DoD assessed and mitigated cybersecurity risks when purchasing commercial off-the-shelf information technology items. Although we primarily focused on Government purchase card purchases, we also assessed risks affecting traditional acquisition processes.

As required by law, attached to this report are responses received from one or more non-governmental organizations or business entities that are specifically identified in the report.

July 23, 2019

Audit of Protection of DoD Controlled Unclassified Information on Contractor-Owned Networks and Systems DODIG-2019-105

Publicly released: July 25, 2019 We determined whether DoD contractors implemented adequate security controls to protect DoD-controlled unclassified information (CUI) maintained on their networks and systems from internal and external cyber threats. CUI is a designation for identifying unclassified information that requires proper safeguarding in accordance with Federal and DoD guidance.

July 23, 2019

Project Announcement: Audit of Munitions Storage Facilities in the U.S. European Command (Project No. D2019-D000RH-0186.000)

We plan to begin the subject audit in July 2019. The objective of this audit is to determine whether the DoD stored and secured its munitions in the U.S. European Command in accordance with applicable policy. We will consider suggestions from management on additional or revised objectives.