Open Recommendations

(U) Rec. 2.j: The DoD OIG recommended that the U.S. Special Operations Command Director for Command, Control, Communications and Computer/Cyber, Chief Information Officer update the classified mobile device user agreement to include all Committee on National Security Systems Directive No. 520 and National Security Agency requirements and ensure that all users have acknowledged the updated user agreement.

(U) Rec. 2.k: The DoD OIG recommended that the U.S. Special Operations Command Director for Command, Control, Communications and Computer/Cyber, Chief Information Officer 4develop and implement procedures for retaining signed classified mobile device user agreements.

(U) Rec. 2.l: This recommendation is Controlled Unclassified Information

(U) Rec. 2.m: This recommendation is Controlled Unclassified Information

(U) Rec. 2.n: The DoD OIG recommended that the U.S. Special Operations Command Director for Command, Control, Communications and Computer/Cyber, Chief Information Officer Implement a cyber incident response plan and controls to ensure \that the plan is reviewed and approved annually.

(U) Rec. 3.a: The DoD OIG recommended that the Director of the Defense Information Systems Agency's Joint Enterprise Services Directorate update inventory records for all classified mobile devices to include information for the six elements required in an accountable property system of record.

(U) Rec. 3.b: The DoD OIG recommended that the Director of the Defense Information Systems Agency's Joint Enterprise Services Directorate develop and implement a process to ensure inventories are conducted periodically and records are updated in a timely manner; immediately reconcile all issued and on-site classified mobile devices; update inventory records; and take appropriate action if you are unable to properly reconcile a classified mobile device.

(U) Rec. 3.c: This recommendation is Controlled Unclassified Information

(U) Rec. 3.d: This recommendation is Controlled Unclassified Information

(U) Rec. 3.e: The DoD OIG recommended that the Director of the Defense Information Systems Agency's Joint Enterprise Services Directorate immediately revalidate and document the user justification for the devices and recall the device if the user no longer has a valid mission need, revise existing access policies to require detailed written justifications for obtaining classified mobile devices, and establish processes to periodically, at least annually, revalidate the need for continued access to the devices.

(U) Rec. 3.f: This recommendation is Controlled Unclassified Information

(U) Rec. 3.g: This recommendation is Controlled Unclassified Information

(U) Rec. 3.h: The DoD OIG recommended that the Director of the Defense Information Systems Agency's Joint Enterprise Services Directorate revise existing or develop new classified mobile device training programs that include information on all 23 Office of the Secretary of Defense memorandum requirements.

(U) Rec. 3.i: The DoD OIG recommended that the Director of the Defense Information Systems Agency's Joint Enterprise Services Directorate provide all existing classified mobile device users with the updated training that includes all 23 Office of the Secretary of Defense memorandum requirements.

(U) Rec. 3.j: The DoD OIG recommended that the Director of the Defense Information Systems Agency's Joint Enterprise Services Directorate establish a mechanism to track the status of all classified mobile device user agreements and ensure that all users have acknowledged the most recent version of the user agreement.

(U) Rec. 3.k: The DoD OIG recommended that the Director of the Defense Information Systems Agency's Joint Enterprise Services Directorate develop and implement procedures for retaining signed classified mobile device user agreements.

(U) Rec. 3.l: This recommendation is Controlled Unclassified Information

(U) Rec. 3.m: This recommendation is Controlled Unclassified Information

(U) Rec. 4: This recommendation is Controlled Unclassified Information

(U) Rec. 5: This recommendation is Controlled Unclassified Information

Review and clarify for all stakeholders the roles, responsibilities, and lines of authority and decision-making for each stage of the program and update program documentation accordingly.

Prioritize filling key senior management vacancies as soon as practical. In addition, prioritize filling key program team vacancies, as appropriate, including those requested for FY 2025.

Update the program’s risk register to include contingency plans for high impact risks.

Establish and implement a method to track the amount of CALR S&E funds expended separately from other IIJA NFS S&E funds.

The Under Secretary for Health works with the Women’s Program Office to gain an understanding of barriers to osteoporosis clinical reminder use and based on results, implement action as needed.