Audit of the DoD’s Actions to Mitigate Ivanti Connect Secure and Ivanti Policy Secure Vulnerabilities

View Report

Date Issued

Wednesday, June 4, 2025

Submitting OIG

Department of Defense OIG

Agencies Reviewed/Investigated

Department of Defense

Report Number

DODIG-2025-108

Report Type

Audit

Agency Wide

Yes

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

Open Recommendations

This report has 4 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
D-2025-0108-D000CU-0001-0001	No	$0	$0
(U) Rec. 1: The DoD OIG recommended that the DoD Chief Information Officer develop and implement a process requiring DoD Components to identify changes to their software, hardware, and firmware information, such as changes to manufacturer or device names, and update their information technology inventories in a timely manner.
D-2025-0108-D000CU-0001-0002.a	No	$0	$0
(U) Rec. 2.a: The DoD OIG recommended that the Commander, Joint Force Headquarters-DoD Information Network revise the process for developing orders, including a requirement to list all current, previous, and alternate names of hardware and software in the orders to the greatest extent possible.
D-2025-0108-D000CU-0001-0002.b	No	$0	$0
(U) Rec. 2.b: The DoD OIG recommended that the Commander, Joint Force Headquarters-DoD Information Network develop and implement a process to ensure that DoD Components take all actions agreed to in plans of actions and milestones and to hold the respective DoD Component and Department of Defense Information Network area of operations accountable if the DoD Component does not comply with the agreed actions.
D-2025-0108-D000CU-0001-0002.c	No	$0	$0
(U) Rec. 2.c: The DoD OIG recommended that the Commander, Joint Force Headquarters-DoD Information Network review the process for developing and distributing orders and responding to questions from the DoD Information Network Areas of Operation, identify opportunities to make the process more effective and efficient, and revise the process accordingly.