The U.S. Department of defense (DoD) is facing meaningful hurdles in effectively monitoring the performance and ensuring the security of its major IT business systems. This is happening even with a planned investment of $10.9 billion in these programs through fiscal year 2025,according to a recent assessment by the Government Accountability Office (GAO).

The GAO’s sixth annual review of the DoD’s IT business programs highlighted considerable deficiencies in both performance reporting and cybersecurity planning across the Pentagon’s 24 major IT investments. These investments are crucial as they support essential functions such as healthcare, human resources, financial management, logistics, and contracting.

Performance Metric Gaps

The audit showed that five out of 19 operational IT programs did not identify the minimum required performance metrics across key categories. This lack of identification makes it arduous for defense officials to properly evaluate whether these systems are enhancing customer satisfaction, providing financial returns, or fostering innovation. Only one program managed to meet all its performance targets, while 17 programs achieved some, and one failed to meet any.

“The GAO’s sixth annual review of the DoD’s IT business programs found significant gaps in performance reporting and cybersecurity planning.”

Cybersecurity Concerns

In addition to performance tracking issues, the report also raised concerns about cybersecurity planning.The GAO emphasized the need for more robust strategies to protect these critical systems from evolving cyber threats.