DEFENSE INFRASTRUCTURE: Guidance Needed to Develop Metrics and Implement Cybersecurity Requirements for Utilities Privatization Contracts
Abstract
Since Congress provided statutory authority in 1997 for the privatization of utility systems at military installations, the military departments have privatized nearly 600 utility systems. According to DOD officials, utilities privatization enables military installations to obtain safe, reliable, and technologically current utility systems at a relatively lower cost than they would under continued government ownership. The Senate report accompanying a bill for the National Defense Authorization Act for Fiscal Year 2018 included a provision that GAO review DODs utilities privatization program. This report assesses the extent to which DOD has (1) tracked utilities privatization contract performance and developed measureable performance standards, and (2) implemented cybersecurity guidance for industrial control systems associated with privatized utility systems. GAO reviewed relevant policies and internal control standards, analyzed a nongeneralizable sample of utilities privatization contract documents, and interviewed DOD and selected military installation officials and privatized utility system owners.
Document Details
- Document Type
- Technical Report
- Publication Date
- Sep 01, 2018
- Accession Number
- AD1154523
Entities
People
- Brian Lepore
Organizations
- United States Government Accountability Office