May 3, 2016

Project Announcement: DoD Cybersecurity Weaknesses as Reported in Audit Reports Issued From August 1, 2015, Through July 31, 2016 (Project No. D2016-D000RB-0139.000)

We plan to begin the subject project in May 2016. Our objective is to summarize cybersecurity weaknesses identified in audit reports and testimonies issued by the DoD audit community and the Government Accountability Office. This is report DoD Cybersecurity Weaknesses as Reported in Audit Reports Issued From August 1, 2015, Through July 31, 2016 DODIG-2017-034.

May 3, 2016

Project Announcement: Audit of Control Systems Cybersecurity (Project No. D2016-D000RB-0149.000)

We plan to begin the subject audit in May 2016. This is the first in a series of audits on the security of control systems that support DoD critical missions or assets. Our objective is to determine whether DoD has implemented cybersecurity controls. This is report Control Systems Supporting Tier I Task Critical Assets Lacked Basic Cybersecurity Controls (Classified) DODIG-2017-093.

May 2, 2016

Project Announcement: Audit of Army Controls for Processing and Transferring Iraq Train and Equip FundEquipment (Project No. D2016-D000JB-0104.000)

We plan to begin the subject audit in March 2016. This project relates to the overseas contingency operation, Operation Inherent Resolve. This is one in a series of audits on property accountability in Kuwait and Iraq. This is report The Army Did Not Implement Effective Controls To Maintain Visibility and Accountability of Iraq Train and Equip Fund Equipment DODIG-2016-134.

May 2, 2016

Project Announcement: Audit of Completeness and Accuracy of the Department of Defense Information Technology Portfolio Repository (Project No. D2016-D000RA-0129.000)

We plan to begin the subject audit in March 2016. Our objective is to determine whether DoD Components are reporting complete and accurate information technology data into the DoD Information Technology Portfolio Repository. This is report DoD Components Did Not Report Complete and Accurate Data in the DoD Information Technology Portfolio Repository DODIG-2017-082.

April 29, 2016

Followup Audit: DLA Officials Took Appropriate Actions to Address Concerns With Repair Parts for the High Mobility Multipurpose Wheeled Vehicle DODIG-2016-083

We determined whether the Contracting Officer, Defense Logistics Agency (DLA) Land and Maritime, implemented Recommendations B.2.a and b in Report No. DODIG-2014-054 as agreed.

April 29, 2016

Evaluation of Ammunition Data Cards

We initiated the evaluation of ammunition data cards (ADCs) in response to a House Armed Services Committee staff request. The objective of this evaluation was to determine whether ADCs were processed in accordance with Military Standard (MIL-STD)-1168, “Ammunition Lot Numbering and Ammunition Data Card,” and applicable contractual requirements to ensure material traceability and verification of ammunition component information. An ADC is a permanent record that contains ammunition information, including lot number, manufacturer, quantity, date manufactured, drawing specification number, and drawing revision.

April 29, 2016

The Air Force Processes for Approving Air Force Life Cycle Management Center Single-Award Indefinite-Delivery Indefinite-Quantity Contracts Need Improvement

We determined whether the Air Force Life Cycle Management Center’s (AFLCMC) single-award indefinite-delivery indefinite-quantity (IDIQ) contracts were properly justified in accordance with Federal and DoD procedures. In addition, we determined whether the delivery and task orders were within the scope of the contracts, in accordance with the Statement of Work and Performance Work Statement. We reviewed the eight single-award IDIQ contracts awarded by the AFLCMC from October 1, 2013, through January 27, 2015, with a total value of $2.5 billion. We also reviewed 76 task orders associated with the eight contracts, with a total value of $1 billion.

April 29, 2016

Project Announcement: Termination of the Audit of DoD Contractor's Reporting and Investigating of CyberIncidents (Project No. D2015-D000RB-0249.000)

We announced the subject audit on September 8, 2015 (attached). The audit objective was to determine whether DoD contractors were reporting and investigating cyber incidents in accordance with DoD requirements.