Open Recommendations

Ineffective Network Access Controls for Unauthorized Assets (Asset Discovery)

Inadequate Software License Management (Licensing)

Inadequate Management of Unsupported Software Processes (Inventory Asset Management)

Establish internal controls to ensure the Service Standard Directory is updated timely when service changes in specific markets.

Adjust package processing plans and staffing plans during peak season to ensure full capacity of machines is used to minimize delayed mail volume.

Direct and monitor division management decisions in the offload process during peak season to incorporate strategic factors, such as facility type, resources, and equipment capacity.

Develop a process for clear communication of offloads between all levels of processing and logistics functions.

Assess and update peak season key performance indicators and initiatives.

Develop measures and targets to evaluate the customer experience during peak season.

Adjust the timelines for peak initiatives to incorporate post-peak season package volume on operations.

Rec. 1.a: The DoD OIG recommended that the Director, Defense Civilian Personnel Advisory Service evaluate whether current document retention policies for civilian pay ensure proper documentation is readily available to support pay and benefits transactions and personnel record updates.

Rec. 1.b: The DoD OIG recommended that the Director, Defense Civilian Personnel Advisory Service develop and implement appropriate control activities to ensure accurate and complete recording of payroll and benefit transactions based on the maintained supporting documentation.

(U) Rec. 1: Recommendation is classified.

(U) Rec. 2: Recommendation is Classified.

(U) Rec. 3: Recommendation is Classified

(U) Rec. 4: Recommendation is Classified.

(U) Rec. 1: Recommendation is Classified

(U) Rec. 2: Recommendation is Classified

(U) Rec. 3: Recommendation is Classified

(U) Rec. 4: Recommendation is Classified

(U) Rec. 5: Recommendation is Classified

(U) Rec. 6: Recommendation is Classified

(U) Rec. 7: Recommendation is Classified

(U) Rec. 1: The DoD OIG recommended that the Air Force Program Executive Officer for Cyber and Networks define the Secret and Below Releasable Environment network minimum viable capability release standards to better determine policy constraints and the required exception processes and ensure that the system is developed in compliance with these requirements.

(U) Rec. 3: The DoD OIG recommended that the DoD Chief Information Officer, in coordination with the Chief Digital and Artificial Intelligence Officer, develop and implement policy that establishes the standards for the tagging and labeling of information shared on the Mission Partner Environments.