• Office of Inspector General, United States Department of Defense, 4800 Mark Center Drive, Alexandria, VA 22350-1500

Jan. 4, 2022

Project Announcement: Oversight of the Statement on Standards for Attestation Engagements No. 18 Examination of the Defense Property Accountability System (Project No. D2022- D000FE-0065.000)

Our planned oversight will begin immediately. The Director of the Defense Logistics Agency (DLA) requested a Statement on Standards for Attestation Engagements No. 18 (SSAE 18) examination of the Defense Property Accountability System (DPAS) for the period of October 1, 2021, through June 30, 2022. We contracted with the independent public accounting firm of Ernst & Young, LLP, (EY) to perform the SSAE 18 examination. The objective of EY’s attestation examination is to issue an opinion on the DLA’s description of DPAS and the suitability of the design and operating effectiveness of the controls to achieve the related control objectives stated in the description. The objective of our project is to provide contract oversight of EY’s attestation examination and determine whether EY complied with the contract and applicable attestation and generally accepted government auditing standards.

Jan. 4, 2022

Project Announcement: Oversight of the Statement on Standards for Attestation Engagements No. 18 Examination of the Defense Agencies Initiative System (Project No. D2022- D000FE-0064.000)

Our planned oversight will begin immediately. The Director of the Defense Logistics Agency (DLA) requested a Statement on Standards for Attestation Engagements No. 18 (SSAE 18) examination of the Defense Agencies Initiative (DAI) system for the period of October 1, 2021, through June 30, 2022. We contracted with the independent public accounting firm of Ernst & Young LLP, (EY) to perform the SSAE 18 examination. The objective of EY’s attestation examination is to issue an opinion on the DLA’s description of the DAI system and the suitability of the design and operating effectiveness of the controls to achieve the related control objectives stated in the description. The objective of our project is to provide contract oversight of EY’s attestation examination and determine whether EY complied with the contract and applicable attestation and generally accepted government auditing standards.

Jan. 3, 2022

Project Announcement: Audit of the Military Service Recruiting Organizations’ Efforts to Screen Applicants for Supremacist, Extremist, and Criminal Gang Behavior (Project No. D2022-D000RG-0052.000)

We plan to begin the subject audit in January 2022. The objective of this audit is to determine whether Military Service recruiting organizations screened applicants for supremacist, extremist, and criminal gang behavior, according to DoD and Military Service policies and procedures. We may revise the objective as the audit proceeds, and we will also consider suggestions from management for additional or revised objectives.

Dec. 17, 2021

Management Advisory: DoD Support for the Relocation of Afghan Nationals at Rhine Ordnance Barracks (DODIG-2022-045)

Publicly Released: December 21, 2021

The purpose of this memorandum is to advise officials responsible for the relocation of Afghan evacuees of results from our site visit to Rhine Ordnance Barracks (ROB), Germany, on September 23, 2021, where the audit team observed the housing conditions and support of Afghan evacuees.

Dec. 16, 2021

Transmittal of the Independent Auditor’s Reports on the Defense Information Systems Agency Working Capital Fund Financial Statements and Related Notes for FY 2021 and FY 2020 (DODIG-2022-044)

Publicly Released: January 3, 2022

This report begins on page 90 of the Defense Information Systems Agency Working Capital Fund Annual Financial Report Fiscal Year 2021.

Dec. 13, 2021

Audit of the Business Model for TransDigm Group Inc. and Its Impact on Department of Defense Spare Parts Pricing (DODIG-2022-043)

Publicly Released: December 13, 2021

The objective of this audit was to determine whether TransDigm Group Inc.'s (TransDigm) business model impacted the DoD's ability to pay fair and reasonable prices for spare parts.

Dec. 8, 2021

Project Announcement: Summary of Reports and Testimonies Regarding DoD Cybersecurity From July 1, 2020, Through June 30, 2022 (Project No. D2022-D000CS-0046.000)

We plan to begin the subject audit in December 2021. The objective of this audit is to (1) summarize unclassified and classified reports and testimonies regarding DoD cybersecurity that the DoD Office of Inspector General, the Government Accountability Office, and other DoD oversight organizations issued between July 1, 2020, and June 30, 2022, concerning DoD cybersecurity; (2) identify cybersecurity trends; and (3) provide a status of open DoD cybersecurity-related recommendations. We may revise the objective as the audit proceeds, and we will also consider suggestions from management for additional or revised objectives.

Dec. 7, 2021

Project Announcement: Oversight of the FY 2022 Army Statement on Standards for Attestation Engagements No. 18 (SSAE 18), System and Organization Controls Examination of the General Fund Enterprise Business System as of July 31, 2022 (Project No. D2022-D000FI-0036.000)

Our planned oversight will begin immediately. The Assistant Secretary of the Army (Financial Management and Comptroller) requested an SSAE 18 examination of the General Fund Enterprise Business System (GFEBS) administration and operational support services as of July 31, 2022. We contracted with the independent public accounting firm of KPMG LLP (KPMG), to perform that examination. The objective of KPMG’s attestation examination is to issue an opinion on the Army’s description of the system supporting the GFEBS administration and support services and the suitability of the design of the controls to achieve the related control objectives stated in the description. The objective of this oversight project is to provide contract oversight of KPMG’s attestation examination and determine whether KPMG complied with the contract and applicable attestation and generally accepted government auditing standards.

Dec. 7, 2021

Project Announcement: Oversight of the Audit of the FY 2022 Army General Fund Financial Statements (Project No. D2022-D000FI-0039.000)

Our planned oversight will begin immediately. The Chief Financial Officers Act of 1990, as amended, requires this audit. In accordance with the Act, the DoD Office of Inspector General is the principal auditor for the Army General Fund Financial Statements. We contracted with the independent public accounting firm of KPMG LLP (KPMG) to audit the Army General Fund Financial Statements for fiscal years ending September 30, 2022, and September 30, 2021. The objective of KPMG’s audit is to determine whether the FY 2022 Army General Fund Financial Statements and related notes are presented fairly and in conformity with accounting principles generally accepted in the United States of America. The objective of this oversight project is to provide contract oversight of KPMG’s audit of the Army General Fund Financial Statements for fiscal years ending September 30, 2022, and September 30, 2021, and determine whether KPMG complied with applicable auditing standards. We will execute the contractor’s audit procedures associated with reviews of transactions and facilities that are Special Access Program, TOP SECRET, and TOP SECRET/Sensitive Compartmented Information and provide an unclassified version of the results of our review to KPMG to use in developing its overall audit conclusions.

Dec. 7, 2021

Project Announcement: Audit of DoD Actions Taken to Implement Cybersecurity Protections Over Remote Access Software in the Coronavirus Disease–2019 Telework Environment (Project No. D2022-D000CR-0043.000)

We plan to begin the subject audit in December 2021. We are conducting the subject audit at the request of the House Committee on Oversight and Reform. The objective of this audit is to determine the actions taken by the DoD to configure remote access software used to facilitate telework during the coronavirus disease–2019 (COVID-19) pandemic to protect DoD networks and systems from potential malicious activity. We will also determine the extent to which the DoD implemented security controls to protect remote connections to its networks. We may revise the objective as the audit proceeds, and we will consider suggestions from management for additional or revised objectives.