Followup Audit on Corrective Actions Taken by DoD Components in Response to DoD Cyber Red Team-Identified Vulnerabilities and Additional Challenges Facing DoD Cyber Red Team Missions (Full Report is Classified)

(U) Rec. A.1: The DoD OIG recommended that the Commander for U.S. Southern Command prioritize the risk of each unmitigated vulnerability identified in DoD Cyber Red Team Reports and adversarial assessments, take immediate actions to mitigate high-risk vulnerabilities, and if unable to immediately mitigate any of the vulnerabilities, include them on a command-approved plan of action and milestones.

(U) Rec. B.1.c: The DoD OIG recommended that the Secretary of Defense, in conjunction with the implementation of Recommendation A.5, assign an organization with responsibility to assess and identify a baseline of core and specialized training standards, based on the three DoD Cyber Red Team roles that DoD Cyber Red Team staff must meet for the team to be certified and accredited.