department of defense agency financial report fiscal year 2012

Department of Defense Agency Financial Report for FY 2012
Table 1b-1. FY 2012 Internal Control over Operations Material Weaknesses
Material Weaknesses
d Internal assessments
have identified
weaknesses in the
Department’s cyber
security controls,
potentially increasing
vulnerability of DoD
systems.
3 Comptroller and/or
Resource
Management
a The Department’s
current business
processes, systems,
and internal controls
do not provide
reliable, accurate
and verifiable
financial statements.
Further, the financial
management
workforce needs to
be well-trained to
Year
Identified
DoD
Components
FY 2011 OSD;
USAFRICOM
FY 2011 Departmentwide
A-44
Corrective Actions
The Department will
continue ongoing actions to
address weaknesses in the
complex network of
systems referred to as the
DoD Information Network
Systems. The Department
is updating identified
security controls to current
industry standards. The
DoD also is enhancing the
system certification and
accreditation process to
incorporate risk
management throughout
the systems lifecycle. This
includes implementing a
continuous risk monitoring
program that will identify
weak security controls and
assess corrections. The
Joint Information
Environment, scheduled for
completion in FY 2018, is
creating a shared
infrastructure and single
security architecture that
gives better visibility of
network activity at points of
vulnerability. In FY 2013,
DoD will continue to
implement insider threat
protection such as Public
Key Infrastructure and data
access monitoring.
The Department is
implementing established
guidance that will enable
Components to improve
their processes, systems
and controls. The biannual
FIAR Plan Status Report
outlines the Department’s
and Components’ progress
and future plans for
implementing ERPs and
improving standard
Target
Correction
Year
FY 2013 3
FY 2017
3
Target correction date was reported as FY 2012 in the FY 2011 Statement of Assurance. In FY 2012, the target
correction date was reevaluated and extended to a future date
Addendum A