Industrial Security: Improved Risk Management and Stakeholder Engagement Needed to Help DOD Address Mission Gaps

This GAO report examines how the Defense Counterintelligence and Security Agency manages industrial security risks within the National Industrial Security Program. GAO found that DCSA conducts thousands of security reviews and oversees cleared contractor facilities, but gaps remain in risk analysis, staffing, system modernization and stakeholder engagement. The report recommends enhanced analytic tools, a risk response plan, assessment of the NAESOC initiative and stronger user feedback during development of the replacement National Industrial Security System.