June 11, 2020
Summary of Reports and Testimonies Regarding Department of Defense Cybersecurity From July 1, 2018, Through June 30, 2019 (DODIG-2020-089)
Publicly Released: June 15, 2020
The objective of this summary report was to: (1) summarize unclassified and classified reports issued and testimony provided to Congress regarding DoD cybersecurity by the DoD Office of Inspector General, the Government Accountability Office, and the other DoD oversight organizations between July 1, 2018, and June 30, 2019; (2) identify cybersecurity risk areas based on the summarized reports and testimonies, and (3) identify the open DoD cybersecurity‑related recommendations. We issue this summary report annually to identify cybersecurity risk areas, based on the National Institute of Standards and Technology (NIST), “Framework for Improving Critical Infrastructure Cybersecurity,” April 16, 2018, (NIST Cybersecurity Framework), for DoD management to review and consider when implementing changes to improve cybersecurity.