Back to news

December 19, 2018 | International, C4ISR

DoD IG: Military networks are exposed to ‘unnecessary’ cyber risks

By:

The military services are exposing networks to “unnecessary cybersecurity risks” thanks in part to a lack of visibility over software application inventories, according to a Department of Defense Inspector General report.

The IG investigated whether DoD components rationalized their software applications by identifying and eliminating any duplicative or obsolete applications. Rationalizing software applications seeks to improve enterprise IT by identifying all software applications on the network; determining if existing applications are needed, duplicative or obsolete; and determining if applications already existing within the network prior to purchasing new ones.

The audit — which focused on Marine Corps, Navy and Air Force commands and divisions — found that the groups examined did not consistently perform this rationalization process. By not having visibility into software application inventories, these organizations were unable to identify the extent of existing vulnerabilities within their applications, the report found.

Moreover, such a process could lead to cost savings associated with eliminating duplicative and obsolete applications.

Fleet Forces Command was the only command the IG reviewed that had a process in place for eliminating duplicative or obsolete applications. The Air Force did not have a process in place to prevent duplication when purchasing new applications.

The report placed blame on the DoD chief information officer for not implementing a solution for software rationalization in response to Federal Information Technology Acquisition Reform Act requirements.

The IG made three recommendations for the CIO, who did not provide a response to draft recommendations:

  • Develop an enterprisewide process for conduction software application rationalization throughout DoD;
  • Establish guidance requiring DoD components to conduct rationalization and require DoD component CIOs to develop implementation guidance outlining responsibilities for rationalization. Such a policy should also require components on at least an annual basis to validate the accuracy of their owned and in use software applications inventory; and
  • Conduct periodic review to ensure components are regularly validating the accuracy of their inventory and they are eliminating duplicative and obsolete applications.

https://www.fifthdomain.com/dod/2018/12/18/dod-ig-military-networks-are-exposed-to-unnecessary-cyber-risks

On the same subject

  • New in 2019: Here’s what the Air Force is doing about aviation mishaps

    January 7, 2019 | International, Aerospace

    New in 2019: Here’s what the Air Force is doing about aviation mishaps

    By: Kyle Rempfer The Air Force, like the other services, suffered a string of fatal aviation mishaps in 2018. A Military Times in-depth review of 5,500 aviation accidents that have occurred since 2013 found that accidents among the nation's manned fighters, bombers, tankers, tilt-rotor and helicopter aircraft has increased 39 percent. In the Air Force, the most serious Class A mishaps have declined, but the number of non-fatal Class C mishaps is increasing, causing some experts to warn that future problems could be on the horizon if the issue is not dealt with. To address concerns among the aviation community, Congress created an eight-person independent commission to review the mishap spike in the 2019 defense bill. For its part, the Air Force conducted a wave of one-day safety stand-downs of flying and maintenance wings over the summer. Air Force Chief of Staff Gen. Dave Goldfein ordered the stand-down in May, after several high-profile mishaps, including the May 2 crash of a WC-130 Hercules and the March 15 loss of an HH-60G Pave Hawk in western Iraq, both of which killed all on board. In a September news release, the Air Force said their review of the data identified six potential risks to aviation safety: stress caused by high operations tempos; a lack of time to properly focus on flying basics, mission activities and training; pressure to accept risk; a culture that pushes airmen to always execute the mission; decreased availability of aircraft; and the potential for airmen to become complacent when carrying out routine tasks. “The review proved tremendously helpful as we continue to seek both high levels of safety with intense and realistic training," Goldfein said in the release. The full report summary, provided at Air Force Times' request, also raised concerns about the increasing requirements on maintainers, and low experience among some maintenance personnel. The service has distributed those findings to the field, according to the release. The findings will help flying and maintenance leaders guide their decisions. “We're taking necessary steps to ensure our airmen operate as safely as possible in an inherently dangerous business,” Goldfein said. “I want to train hard and I want commanders to push themselves and their airmen to achieve high levels of readiness. Sometimes the right answer is knock it off ... sometimes it is push it up. Confidence in the air, safety on the ground and in the air, it's a commander's business.” The summary also cites the aging fleet of Air Force aircraft as a problem contributing to increased maintenance requirements and decreased aircraft availability. The Air Force has already started putting plans into place to address airmen's concerns, including adding more support back to squadrons, reducing additional duties, “enhancing information processes for aircrew mission planning” and cutting staff requirements, according to the release. https://www.airforcetimes.com/news/your-air-force/2019/01/05/new-in-2019-heres-what-the-air-force-is-doing-about-aviation-mishaps

  • Contract Awards by US Department of Defense - December 01, 2020

    December 2, 2020 | International, Aerospace, Naval, Land, C4ISR, Security

    Contract Awards by US Department of Defense - December 01, 2020

    U.S. SPECIAL OPERATIONS COMMAND Raytheon Technologies, McKinney, Texas, (H92408-21-C-0001) was awarded a $235,576,667 C-Type, multi-year procurement contract for the production and delivery of the Silent Knight Radar in support of U.S. Special Operations Command (USSOCOM) requirements. Fiscal 2020 procurement funds in the amount of $8,181,918; and fiscal 2021 procurement funds in the amount of $61,181,024 are being obligated at time of award. The work will be performed in McKinney and Forest, Mississippi, and is expected to be completed by July 2025. This is a sole-source award in accordance with Federal Acquisition Regulation 6.302-1. USSOCOM, Tampa, Florida, is the contracting activity. ARMY Better by Design LLC,* New Boston, Missouri (W912P9-21-D-0011); Davinroy Mechanical Contractor Inc.,* Belleville, Illinois (W912P9-21-D-0012); Eagle Eye Electric LLC,* Las Vegas, Nevada (W912P9-21-D-0013); Gale Construction of Illinois,* Joliet, Illinois (W912P9-21-D-0014); Bloomsdale Excavating Co. Inc.,* Bloomsdale, Missouri (W912P9-21-D-0015); Keller Construction Inc.,* Glen Carbon, Illinois (W912P9-21-D-0016); Magruder Construction Co. Inc.,* Eolia, Missouri (W912P9-21-D-0017); Shinn Kellogg LLC,* Albia, Iowa (W912P9-21-D-0018); Syte Corp.,* Chicago, Illinois (W912P9-21-D-0019); Medvolt Construction Services LLC,* Kansas City, Missouri (W912P9-21-D-0020); and A&H Ambica JV LLC,* Livonia, Michigan (W912P9-21-D-0021), will compete for each order of the $95,000,000 firm-fixed-price contract for the construction of various civil and flood recovery projects. Bids were solicited via the internet with 13 received. Work locations and funding will be determined with each order, with an estimated completion date of Nov. 30, 2025. The U.S. Army Corps of Engineers, St. Louis, Missouri, is the contracting activity. Exp Federal Inc., Chicago, Illinois (W912HN-21-D-2000); Burns & McDonnell Engineering Co. Inc., Kansas City, Missouri (W912HN-21-D-2001); and Barge/Emersion JV, Nashville, Tennessee (W912HN-21-D-2002), will compete for each order of the $20,000,000 firm-fixed-price contract for architect-engineer general design services. Bids were solicited via the internet with 25 received. Work locations and funding will be determined with each order, with an estimated completion date of Nov. 30, 2025. The U.S. Army Corps of Engineers, Savannah, Georgia, is the contracting activity. NAVY Kellogg Brown and Root Services Inc., Houston, Texas, is awarded a $28,324,156 indefinite-delivery/indefinite-quantity modification for the incorporation of additional services for Option Periods Three through Seven under the base operating service contract at Naval Support Activity (NSA) Kingdom of Bahrain. After award of this modification, the total cumulative contract value will be $139,809,309. The work to be performed provides for, but is not limited to, all management, supervision, tools, materials, supplies, labor and transportation services necessary to perform security operations, galley services, unaccompanied housing, facility management, emergency service requests, urgent service, routing service, facilities investment, custodial, pest control service, integrated solid waste, grounds maintenance, utility management, wastewater, operate reverse osmosis water treatment system, chiller and transportation, at NSA Kingdom of Bahrain. Work will be performed in Kingdom of Bahrain. Performance period is Dec. 1, 2020, to Nov. 30, 2021. No funds will be obligated at time of award. Fiscal 2021 operation and maintenance (O&M) (Navy); fiscal 2021 O&M (Coast Guard); and fiscal 2021 O&M (Army) contract funds in the amount of $912,863 for recurring work will be obligated on individual task orders issued during the option period. The Naval Facilities Engineering Systems Command, Europe Africa Central, Naples, Italy, is the contracting activity (N62470-17-D-4007). Kellogg Brown and Root Services Inc., Houston, Texas, is awarded a $22,251,961 indefinite-delivery/indefinite-quantity modification for the exercise of Option Three under the base operating services contract at Naval Support Activity (NSA), Kingdom of Bahrain. After award of this option, the total cumulative contract value will be $168,133,467. The work to be performed provides for, but is not limited to, all management, supervision, tools, materials, supplies, labor and transportation services necessary to perform security operations, galley services, unaccompanied housing, facility management, emergency service requests, urgent service, routing service, facilities investment, custodial, pest control service, integrated solid waste, grounds maintenance, utility management, wastewater, operate reverse osmosis water treatment system, chiller and transportation at NSA Kingdom of Bahrain. Work will be performed in Kingdom of Bahrain. Performance Period is Dec. 1, 2020 to Nov. 30, 2021. No funds will be obligated at time of award. Fiscal 2021 operation and maintenance (O&M) (Navy); fiscal 2021 O&M (Army); and fiscal 2021 O&M (Coast Guard) contract funds in the amount of $22,251,962 for recurring work will be obligated on individual task orders issued during the option period. The Naval Facilities Engineering Systems Command, Europe Africa Central, Naples, Italy, is the contracting activity (N62470-17-D-4007). Lockheed Martin Corp., Owego, New York, is awarded a $12,350,767 modification (P00021) to previously awarded firm-fixed-price, cost-plus-fixed-fee contract N00019-19-C-0013. This modification adds scope to provide non-recurring engineering and obsolescence services in support of the Airborne Low Frequency Sonars integration into MH-60R production aircraft for the governments of India and Denmark. Work will be performed in Brest, France (58%); and Owego, New York (42%), and is expected to be completed in October 2024. Foreign Military Sales funds in the amount of $12,350,767 will be obligated at time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. Advanced Acoustic Concepts LLC, Haupauge, New York, is awarded a $9,322,942 cost-plus-fixed-fee contract for the Angler System for Seabed Warfare effort. This contract provides for the design and development, fabrication, assembly, integration and test and operational utility assessment of a weapon technology that is capable of operating in a deep-water environment. Work will be performed in Haupauge, New York, with an estimated completion date of Nov. 2, 2022. The total cumulative value of this contract is $9,322,942. Fiscal 2020 research, development, test and evaluation (Navy) funds in the amount of $9,322,942 are obligated at time of award and will expire at the end of the current fiscal year. This contract was competitively procured under N00014-20-S-B001, “Long Range Broad Agency Announcement (BAA) for Navy and Marine Corps Science & Technology.” Since proposals are received throughout the year under the long range BAA, the number of proposals received in response to the solicitation is unknown. The Office of Naval Research, Arlington, Virginia, is the contracting activity (N00014-21-C-1006). Kellogg Brown and Root Services Inc., Houston, Texas, is awarded a $7,826,832 cost-reimbursement task order modification (N33191-18-F-4417) to exercise Option Period Two and provide additional services under the cost-plus-award-fee contract for base operating support services at Naval Support Facility (NSF) Redzikowo, Poland. After award of this modification, the total cumulative contract value will be $19,712,582. The work to be performed provides for furnishing all labor, supervision, management, tools, materials, equipment, facilities, transportation, incidental engineering and other items necessary to provide the base operating support services at NSF Redzikowo. Work will be performed in Slupsk, Poland. This option period is from Dec. 1, 2020, to Nov. 30, 2021. No funds will be obligated at time of award. Fiscal 2021 operation and maintenance (Navy); and fiscal 2021 research and development (Department of Defense) contract funds in the amount of $7,826,832 will be obligated on individual modifications to this task order during the option period. The Naval Facilities Engineering Systems Command, Europe Africa Central, is the contracting activity (N62742-16-D-3551). Lockheed Martin Rotary and Mission Systems, Moorestown, New Jersey, is being awarded a $7,654,990 cost-plus-fixed-fee and cost (no fee) modification to previously awarded contract N00024-14-C-5104 to exercise options for ship integration and test of the AEGIS Weapon System (AWS) for AWS baselines through Advanced Capability Build (ACB) 12. This option exercise will provide AEGIS shipboard integration engineering, AEGIS test team support, AEGIS modernization team engineering support, ballistic missile defense (BMD) test team support and AWS element assessments. Work will be performed in Norfolk, Virginia (33%); San Diego, California (25%); Everett, Washington (25%); Bath, Maine (10%); Moorestown, New Jersey (3%); Camden, New Jersey (2%); and various locations across the U.S., each less than 1% (2%), and is expected to be completed by November 2021. Fiscal 2013 shipbuilding and conversion (Navy) funding in the amount of $1,409,269 will be obligated at the time of award and will not expire at the end of the current fiscal year. The Naval Sea Systems Command, Washington, D.C., is the contracting activity. (Awarded Nov. 30, 2020) AIR FORCE CORRECTION: A contract announced on Nov. 23, 2020, to Northrop Grumman Systems Corp., Clearfield, Utah (FA8202-21-D-0001), in the amount of $185,700,000 for the A-10 Aircraft Structural Integrity Program Legacy VII has not yet been awarded. *Small business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2431502/

  • Watchdog agency accuses chief of military police of blocking investigations | CBC News

    May 5, 2024 | International, Land

    Watchdog agency accuses chief of military police of blocking investigations | CBC News

    The country's military police watchdog has accused the Canadian Forces Provost Marshal of obstructing its independent reviews of complaints.

All news