department of defense agency financial report fiscal year 2012

Department of Defense Agency Financial Report for FY 2012
Table 1b-1. FY 2012 Internal Control over Operations Material Weaknesses
Material Weaknesses
2 Communications,
Intelligence and/or
Security
a Controls related to
safeguarding
Personally
Identifiable
Information (PII) are
ineffective. Metrics
demonstrate a need
to strengthen the
existing controls or
develop new
safeguarding
policies.
b Processes are not in
place to ensure that
military, civilian, and
contractor personnel
with Information
Assurance (IA)
duties have the
proper certification
in their computer
network area of
responsibility.
c Weaknesses exist in
the Department’s
management and
assurance of the
reliability and
security of the
information
technology
infrastructures.
Year
Identified
DoD
Components
A-43
Corrective Actions
decisions through the use of
reporting metrics.
FY 2011 Navy The Navy plans to
implement the use of
individual unique
identification numbers. In
addition, the Navy will
continue to monitor
statistical data to evaluate
whether high-risk breaches
continue to decline.
FY 2011 Air Force The Air Force is developing
and installing a training and
certification system to track
IA personnel certifications.
FY 2006 Navy;
USAFRICOM
The Navy is developing and
implementing instructions
and policies for tracking
equipment accounts
supporting Navy contracts
and a uniform equipment
request and loan tracking
system for managing and
tracking information.
USAFRICOM plans to assess
its consolidated enterprise
and to develop additional
requirements; engineer,
implement, operate, and
maintain a joint enterprise
network; and provide
additional capabilities for
the tactical local area
network.
Target
Correction
Year
FY 2013
FY 2013 3
FY 2013 3
3 Target correction date was reported as FY 2012 in the FY 2011 Statement of Assurance. In FY 2012, the target
correction date was reevaluated and extended to a future date
Addendum A