A Department of Defense task force concluded in 2018 that DOD’s inventory management systems were potentially vulnerable to attack. These systems, run by the Defense Logistics Agency, are used to manage the defense supply chain. They reviewed efforts to reduce the risks in 6 inventory management systems. The agency has taken some prescribed risk management actions but could do more. For example, they found 69% of its plans to fix identified security weaknesses were not carried out on time. They made 5 recommendations to improve the cybersecurity of these systems.
Supply Chain Risk Management Capabilities Center