Audit

Dec. 11, 2023

Project Announcement: FY 2024 Review of the DoD’s Compliance with the Federal Information Security Modernization Act of 2014 (Project No. D2024-D000CP-0043.000)

Public Law 113-283, “Federal Information Security Management Act of 2014 [FISMA],” December 18, 2014, requires each Federal agency to conduct an annual independent evaluation to determine the effectiveness of the agency’s information security program and practices. The objective of this review is to determine the effectiveness of the DoD’s information security policies, procedures, and practices and provide an annual independent evaluation in accordance with FISMA.

Dec. 7, 2023

Audit of Defense Health Agency Controls to Monitor Opioid Prescription Compliance with Federal and DoD Opioid Safety Standards (DODIG-2024-036)

The objective of this audit was to determine whether the Defense Health Agency (DHA) had controls in place to monitor opioid prescriptions and ensure compliance with Federal and DoD opioid safety recommendations and requirements.

Dec. 6, 2023

Project Announcement: Audit of the Army's Management of Undefinitized Contract Actions Awarded to Provide Ukraine Assistance (Project No. D2024-D000AX-0037.000)

The objective of this audit is to determine whether Army contracting officials properly managed undefinitized contract actions awarded to assist Ukraine by obligating funds and definitizing actions within the required limits and adjusting profit for costs incurred, or properly waiving the requirements in accordance with Federal and DoD policies. We may revise the objective as the audit proceeds, and we will also consider suggestions from management for additional or revised objectives.

Nov. 30, 2023

Project Announcement: Oversight of the Audit of the FY 2024 U.S. Department ofthe Army General Fund Financial Statements (Project No. D2024-D000FI-0019.000)

The objective of KPMG's audit is to determine whether the FY 2024 Army General Fund Financial Statements and related notes are presented fairly and in conformity with accounting principles generally accepted in the United States of America. The objective of our project is to provide contract oversight of KPMG's audit and determine whether KPMG complied with the contract and generally accepted government auditing standards.

Nov. 30, 2023

Special Report: Common Cybersecurity Weaknesses Related to the Protection of DoD Controlled Unclassified Information on Contractor Networks (DODIG-2024-031)

**This report was updated on March 11, 2024. See the revision memo click here.

This special report provides insight into the common cybersecurity weaknesses identified in DoD Office of Inspector General audit reports and through our support to the Defense Criminal Investigative Service and the Department of Justice on Civil Cyber-Fraud Initiative investigations related to DoD contractor compliance with Federal cybersecurity requirements for protecting controlled unclassified information. CUI is not classified information but is information created or possessed by the Government that requires safeguarding or dissemination controls according to applicable laws, regulations, and Government-wide policies as defined in Executive Order 13526, “Classified National Security Information,” December 29, 2009.