Audit of DoD Actions Taken to Implement Cybersecurity Protections Over Remote Access Software in the Coronavirus Disease–2019 Telework Environment

Submitting OIG:

Department of Defense OIG

Date Issued:

Friday, March 24, 2023

Agency Reviewed / Investigated:

Department of Defense

Submitting OIG-Specific Report Number:

DODIG-2023-057

Component, if applicable:

Defense Contract Management Agency (DCMA)

Defense Information Systems Agency (DISA)

Defense Intelligence Agency (DIA)

Department of Defense Education Activity (DODEA)

United States Air Force (USAF)

United States Marine Corps (USMC)

United States Navy (USN)

United States Southern Command (USSOUTHCOM)

United States Strategic Command (USSTRATCOM)

Location(s):

Agency-Wide

Type of Report:

Audit

Special Projects:

Pandemic

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
DODIG-2023-057.pdf	7.71 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
D-2023-0057-D000CR-0001-0002.A2a	Open	No
Rec. A.2.a: The DoD OIG recommended that the Chief Information Officer of the Department of the Air Force revise its policy to align with the Windows 10 Security Technical Implementation Guide requirement for disabling inactive user accounts after no more than 35 days.
D-2023-0057-D000CR-0001-0002.A2b	Open	No
Rec. A.2.b: The DoD OIG recommended that the Chief Information Officer of the Department of the Air Force direct network and system administrators to disable inactive user accounts after no more than 35 days of inactivity in accordance with the Windows 10 Security Technical Implementation Guide, develop compensating controls, or formally accept the risk of not disabling the inactive user accounts.

Department of Defense OIG

Department of Defense

The Department of Defense Office of Inspector General was established in 1982. The mission of the DoD OIG, as established by the Inspector General Act of 1978, as amended, (5 U.S.C. Appendix); and implemented by DoD Directive 5106.01, "Inspector General of the Department of Defense," is to serve as an independent and objective office in DoD to:

a) conduct, supervise, monitor, and initiate audits, evaluations, and investigations relating to programs and operations of the Department of Defense,

b) provide leadership and coordination and recommend policies for activities designed to promote economy, efficiency, and effectiveness in the administration of, and to prevent and detect fraud and abuse in, such programs and operations,

c) provide a means for keeping the Secretary of Defense and the Congress fully and currently informed about problems and deficiencies relating to the administration of such programs and operations and the necessity for and progress of corrective action

http://www.dodig.mil

Search form

Audit of DoD Actions Taken to Implement Cybersecurity Protections Over Remote Access Software in the Coronavirus Disease–2019 Telework Environment

Related Open Recommendations