Industrial Security: Improved Risk Management and Stakeholder Engagement Needed to Help DOD Address Mission Gaps , April 24 , 2026
Industrial Security: Improved Risk Management and Stakeholder Engagement Needed to Help DOD Address Mission Gaps , April 24 , 2026
From the report: "In fiscal year 2025, the Defense Counterintelligence and Security Agency (DCSA) conducted over 4,600 security reviews. The agency also documented over 800 security violations (see figure) and over 1,000 open security vulnerabilities associated with cleared contractor facilities. To conduct its industrial security mission, DCSA relied on over 470 industrial security mission personnel and spent over $160 million in fiscal year 2025.
DCSA has taken steps to manage risk with the industrial security mission. These include efforts to identify, assess, and respond to risk. However, DCSA has not addressed gaps to fully assess and respond to risks to its operational activities in line with DOD guidance on risk management. For example, DCSA has not identified and developed analytic capabilities to better support field operators’ assessments of risk at the regional level. With such capabilities, the agency could identify the most significant regional trends affecting its overall performance objectives."
Authors - Government Accountability Office (GAO)Related Resources
