Audit of the DoD’s Compliance with the FY 2022 National Defense Authorization Act’s Requirements Concerning Zero Trust

View Report

Date Issued

Tuesday, April 29, 2025

Submitting OIG

Department of Defense OIG

Agencies Reviewed/Investigated

Department of Defense

Report Number

DODIG-2025-090

Report Type

Audit

Agency Wide

Yes

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

Open Recommendations

This report has 6 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
D-2025-0090-D000CR-0002-0001.B1	No	$0	$0
(U) Rec. B.1: This recommendation is Controlled Unclassified Information
D-2025-0090-D000CR-0002-0002.B2a	No	$0	$0
(U) Rec. B.2.a: The DoD OIG recommended that the Defense Media Activity Director develop a plan for identifying all Defense Media Activity network and system assets that includes metrics and milestones for completing the plan.
D-2025-0090-D000CR-0002-0002.B2b	No	$0	$0
(U) Rec. B.2.b: The DoD OIG recommended that the Defense Media Activity Director update and submit the Defense Media Activities Zero Trust implementation plan to the DoD Chief Information Officer, once all Defense Media Activity network and system assets are identified, to include the Defense Media Activity acquisition approach; implementation schedule; interim and final metrics, including a phased migration plan; and funding required for implementing zero trust.
D-2025-0090-D000CR-0002-0003.B3a	No	$0	$0
(U) Rec. B.3.a: The DoD OIG recommended that the National Guard Bureau Chief coordinate with the Army and Air Force on the zero trust capabilities that the National Guard Bureau will inherit from the Services and update the National Guard Bureau Zero Trust implementation plan accordingly.
D-2025-0090-D000CR-0002-0003.B3b	No	$0	$0
(U) Rec. B.3.b: The DoD OIG recommended that the National Guard Bureau Chief update and submit the National Guard Bureau Zero Trust implementation plan to the DoD Chief Information Officer, to include the National Guard Bureau acquisition approach, implementations, instrumentations, and operational workflows; a detailed schedule with target milestones; interim and final metrics, including a phased migration plan; and the identification of additional funding, authorities, and policies for implementing zero trust.
D-2025-0090-D000CR-0002-0004.B4	No	$0	$0
(U) Rec. B.4: The DoD OIG recommended that the Defense Legal Services Agency Director develop and submit a Zero Trust implementation plan to the DoD Chief Information Officer that includes an acquisition approach, implementations, instrumentations, and operational workflows; a detailed schedule with target milestones; interim and final metrics, including a phased migration plan; and the identification of additional funding, authorities, and policies for implementing zero trust.