INSPECTOR GENERAL DEPARTMENT OF DEFENSE 4800 MARK CENTER DRIVE ALEXANDRIA VIRGINIA 22350-1500 January 6 2016 MEMORANDUM FOR COMMANDER U S CYBER COMMAND CHIEF INFORMATION OFFICER DOD DIRECTOR NATIONAL SECURITY AGENCY CHIEF CENTRAL SECURITY SERVICE INSPECTOR GENERAL OF THE INTELLIGENCE COMMUNITY SUBJECT Audit of Controls Over Securing the National Security Agency Network and Infrastructure Project No D2016-DOOORC-0072 000 We plan to begin the subject audit in January 2016 Our objective is to determine whether initiatives implemented by the National Security Agency are effective to improve security over its systems data and personnel activities Specifically we will determine whether National Security Agency processes and teclmical controls are effective to limit privileged access to National Security Agency systems and data and to monitor privileged user actions for unauthorized or inappropriate activity The classified annex to accompany H R 2596 the Intelligence Authorization Act for Fiscal Year 2016 contained a Department of Defense Inspector General classified reporting requirement This audit is the first in a series We will consider suggestions from management on additional or revised objectives We will perfmm the audit at the offices and locations of the National Security Agency We may identify additional locations during the audit Please provide us with a point of contact for the audit within 5 days of the date of this memorandum The point of contact should be a Government employee- a GS-15 pay band equivalent or the military equivalent Send the contact's name title grade p y band phone number and e-mail address to audrco@dodig mil You can obtain information about the Department ofDefense Office ofinspector General from DoD Directive 5106 01 Inspector General of the Depattment of Defense IG DoD August 19 2014 DoD Instruction 7600 02 Audit Policies October 16 2014 and DoD Instruction 7050 03 Office of the Inspector General ofthe Department ofDefense Access to Records and Information March 22 2013 Our website is www dodig mil If you have any questions please contact Carol N Gorman Assistant Inspector General Readiness and Cyber Operations