Open Recommendations

Enhance current procedures to ensure that new NARA users who do not complete their initial security awareness training, have their accounts automatically disabled in accordance with timeframes promulgated within the Privacy and Awareness Handbook.

Implement requirements across all event logging maturity tiers to ensure events are logged and tracked in accordance with OMB M-21-31.

Update and clarify Departmental guidance to ensure agencies fully and consistently implement SFFAS 54 and related amendments.

(U) Rec 1: Report is Classified

(U) Rec 2.a: Report is Classified

(U) Rec 2.b: Report is Classified

(U) Rec 3: Report is Classified

(U) Rec 3: Report is Classified

(U) Rec 4.a: Report is Classified

(U) Rec 4.b: Report is Classified

(U) Rec 5: Report is Classified

(U) Rec 5: Report is Classified

(U) Rec 6: Report is Classified

(U) Rec 6: Report is Classified

(U) Rec 7.a: Report is Classified

(U) Rec 7.b: Report is Classified

(U) Rec 8.a: Report is Classified

(U) Rec 8.a: Report is Classified

(U) Rec 8.b: Report is Classified

(U) Rec 8.b: Report is Classified

(U) Rec 8.c: Report is Classified

(U) Rec 8.c: Report is Classified

(U) Rec 9.a: Report is Classified

(U) Rec 9.a: Report is Classified

(U) Rec 9.a: Report is Classified

(U) Rec 9.a: Report is Classified

(U) Rec 9.b: Report is Classified

(U) Rec 9.b: Report is Classified

(U) Rec 9.b: Report is Classified

(U) Rec 9.b: Report is Classified

(U) Rec 10.a: Report is Classified

(U) Rec 10.a: Report is Classified

(U) Rec 10.b: Report is Classified

(U) Rec 10.b: Report is Classified

(U) Rec 11: Report is Classified

(U) Rec 12: Report is Classified

(U) Rec 13: Report is Classified

(U) Rec 13: Report is Classified

(U) Rec 14.a: Report is Classified

(U) Rec 14.a: Report is Classified

(U) Rec 14.a: Report is Classified

(U) Rec 14.b: Report is Classified

(U) Rec 14.b: Report is Classified

(U) Rec 14.b: Report is Classified

(U) Rec 15: Report is Classified

(U) Rec 15: Report is Classified

(U) Rec B.1: Report is Classified

(U) Rec B.2: Report is Classified

Rec 1.b: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer coordinate with the Director of Administration and Management to review existing guidance to determine which should be canceled or incorporated into DoD Directive 5105.UW and DoD Instruction 8410.dd, and then approve DoD Directive 5105.UW and DoD Instruction 8410.dd.

We recommend that EAC management document policies and procedures for all significant process areas; including outlining the responsibilities of EAC personnel and the responsibilities of EAC’s service providers.