Feb. 21, 2025

Audit of Cyber Vulnerabilities Impacting Defense Critical Infrastructure (Report No. DODIG-2025-071)

The announced objective of this audit was to assess the progress made by the Departments of the Navy (DON) and Air Force in mitigating the Defense Critical Infrastructure (DCI) cybersecurity vulnerabilities identified during the installation evaluations conducted in response to section 1650 of the National Defense Authorization Act (NDAA) for FY 2017.

Feb. 18, 2025

Management Advisory: Potential Patient Safety and Payment Integrity Concerns Regarding TRICARE Services and Items That Were Not Intended for TRICARE Beneficiaries of Certain Ages (Report No. DODIG-2025-070)

This management advisory provides the results of the DoD Office of Inspector General’s review. We previously provided copies of the draft advisory and requested written comments on the recommendations. We considered management’s comments on the draft when preparing the final advisory. These comments are included in the advisory.

Feb. 7, 2025

Joint Audit of Security Controls over Coast Guard Systems Operating on the Department of Defense Information Network (Report No: DODIG-2025-066)

The objective of this joint audit was to determine whether the Coast Guard implemented cybersecurity controls to protect Coast Guard systems operating on the Department of Defense (DoD) Information Network (DODIN) in accordance with applicable cybersecurity requirements.

Feb. 6, 2025

Whistleblower Reprisal Investigation 66th Force Support Squadron, 66th Air Base Group Hanscom Air Force Base, Massachusetts (Report No. DODIG-2025-063)

We conducted this investigation in response to a reprisal complaint alleging that (Subject 1) and (Subject 2) took personnel actions against (the Complainant) in reprisal for making protected disclosures concerning Subject 1’s behavior and management of the Tavern at Hanscom Air Force Base (AFB), Massachusetts.

Jan. 21, 2025

Audit of the DoD Government Travel Charge Card Program: The Visa IntelliLink Compliance Management System (Report No. DODIG-2025-060)

The objective of this audit is to determine whether DoD officials effectively used policies, procedures, and data systems to identify Government Travel Charge Card (GTCC) misuse, abuse, or fraud. Specifically, this audit report is on the effective use of the Visa IntelliLink Compliance Management data mining system (VICM system).

Jan. 17, 2025

Audit of the Army’s Management of Undefinitized Contract Actions Awarded to Provide Ukraine Assistance (Report No. DODIG-2025-059)

The objective of this audit was to determine whether Army contracting officials properly managed undefinitized contract actions (UCAs) awarded to assist Ukraine by obligating funds and definitizing actions within the required limits and adjusting profit for costs incurred, or properly waiving the requirements in accordance with Federal and DoD policies.

Jan. 10, 2025

Review of Responsibilities and Actions Related to the Secretary of Defense’s Hospitalizations and the DoD’s Policies and Procedures for Notification and Transfer of Functions and Duties (Report No. DODIG-2025-058)

Inspector General Robert P. Storch announced today that the Department of Defense (DoD) Office of Inspector General (OIG) released the “Review of the Responsibilities and Actions Related to the Secretary of Defense’s Hospitalizations and the DoD’s Policies and Procedures for Notification and Transfer of Functions and Duties.” The OIG report released today consists of several parts.

Jan. 10, 2025

Audit of the DoD’s Process for Authorizing Third Party Organizations to Perform Cybersecurity Maturity Model Certification 2.0 Assessments (Report No. DODIG-2025-056)

The objective of this audit was to determine whether the DoD ensured that the process for authorizing third party organizations to perform Cybersecurity Maturity Model Certification (CMMC) 2.0 assessments was effectively implemented.