Jan. 16, 2020
Project Announcement: Oversight of the FY 2020 U.S. Air Force Statement on Standards for Attestation Engagement No. 18, System and Organization Controls Examination of the Defense Enterprise Accounting and Management System (Project No. D2020-D000FT-0073.000)
Our planned oversight will begin immediately. The U.S. Air Force requested a Statement on Standards for Attestation Engagement No. 18 (SSAE 18) examination of the Defense Enterprise Accounting and Management System (DEAMS) as of June 30, 2020. We contracted with the independent public accounting firm of Ernst and Young, LLP, (EY) to perform that SSAE 18 examination of DEAMS.
Project Announcement: Audit of Pharmacy Operations at DoD Military Treatment Facilities (Project No. D2020-D000AW-0011.000)
We plan to begin the subject audit in January 2020. The objective of this audit is to determine whether the Defense Health Agency properly accounted for and safeguarded pharmaceuticals at selected DoD military treatment facilities in accordance with Defense Health Agency and Military Department guidance. We will consider suggestions from management on additional or revised objectives.
Jan. 15, 2020
System Review Report on the Army Internal Review Program DODIG-2020-050
Publically Released: January 17, 2019 We reviewed the system of quality control for the Army Internal Review (IR) Program in effect for the 3-year period ended December 31, 2018. The Army IR offices are responsible for establishing and maintaining a system of quality control that is designed to provide reasonable assurance that the Army IR offices and its personnel comply with professional standards and applicable legal and regulatory requirements in all material respects.
Jan. 14, 2020
Project Announcement: Audit of the DoD Acquisition and Reporting of Cloud Computing Services (Project No. D2020-D000CP-0068.000)
The objective of this audit is to determine whether the DoD Components are acquiring and reporting the use of secure cloud - computing in accordance with DoD policy, guidance, and strategy.
Project Announcement: Audit of the Collection, Analysis, Dissemination, and Security of Sensitive Information Maintained by the Defense Insider Threat Management and Analysis Center (Project No. D2020-D000CP-0074.000)
The objective of this audit is to determine whether the Defense Insider Threat Management and Analysis Center is consolidating Component-level reporting and providing an enterprise level capability to identify and prevent insider threats. In addition, we will determine whether officials implemented effective processes and controls to protect sensitive data, including personally identifiable information and controlled unclassified information.
Project Announcement: Audit of DoD's Compliance With the Federal Information Security Modernization Act of 2014 (Project No. D2020-D000CP-0075.000)
The objective of this audit is to determine the effectiveness of DoD's information security policies, procedures, and practices and provide an annual independent evaluation in accordance with the Federal Information Security Modernization Act of 2014.
Jan. 10, 2020
Evaluation of Defense Contract Management Agency Contracting Officer Actions on Penalties Recommended by the Defense Contract Audit Agency (DODIG-2020-049)
Publicly Released: January 14, 2020
Audit of Controls Over Opioid Prescriptions at Selected DoD Military Treatment Facilities (DODIG-2020-048)
Jan. 9, 2020
Project Announcement: Audit of the National Background Investigation System Security and Interoperability (Project No. D2020-D000CU-0072.000)
We plan to begin the subject audit in January 2020. The objective of this audit is to determine whether the DoD planned for and implemented effective cybersecurity controls to protect sensitive information in the National Background Investigation System. In addition, we will determine whether the DoD planned for, developed, and implemented controls to achieve interoperability between the National Background Investigation System and legacy background investigation systems. We will consider suggestions from management on additional or revised objectives.
Jan. 8, 2020
Project Announcement: Audit of Corrective Actions Taken by DoD Components in Response to Cybersecurity Vulnerabilities Identified During the Cybersecurity Test and Evaluation of DoD Acquisition Programs (Project No. D2020-D000CX-0067.000)
We plan to begin the subject audit in January 2020. The objective of this audit is to determine the extent to which DoD Components took action to accept, mitigate, or remediate cybersecurity vulnerabilities identified during the cybersecurity test and evaluation of DoD acquisition programs. We will consider suggestions from management on additional or revised objectives.