Followup Audit of Controls Over Operating System and Security Software and Other General Controls for Computer Systems Supporting the Defense Finance and Accounting Service

摘要

This is the third in a series of followup audits made to evaluate the corrective actions taken by the Defense Finance and Accounting Service, the Defense Information Systems Agency, and the Defense Logistics Agency in response to prior audits of computer security and other general controls. This audit focused on actions by the Defense Information Systems Agency, Western Hemisphere Defense megacenters in Denver, Colorado, and St. Louis, Missouri, to correct security problems with computer systems that migrated from the former Defense Information Processing Centers in Indianapolis, Indiana, and Kansas City, Missouri, and from the Marine Corps Computer and Telecommunications Activity in Quantico, Virginia. The followup audits were requested by the Under Secretary of Defense (Comptroller) and the Assistant Secretary of Defense (Command, Control, Communications and Intelligence). Our objective was to determine whether corrective actions taken or planned by the two Defense megacenters to improve computer security adequately responded to the recommendations made in two prior reports.