DoD IG Auditing Cybersecurity Reciprocity

The Department of Defense Inspector General announced the start of a joint investigation with the U.S. Army Audit Agency, Naval Audit Service and Air Force Audit Agency into the military’s use of cybersecurity reciprocity. “The audit objective is to determine whether DoD Components are leveraging cybersecurity reciprocity to reduce redundant test and assessment efforts when authorizing information technology through the Risk Management Framework process,” the DoD IG office announced. The service audit agencies will examine the reciprocity within their commands, and will release a “capstone report” on the issue.