An audit conducted by the Defense Department’s inspector general found agency components “may be unaware of known vulnerabilities and cybersecurity risks associated with operating their systems or storing their data.”
Article Link: DOD IG: Officials Failed to Identify Security Risks When Authorizing Cloud Services - Nextgov