Report reveals vulnerabilities in $17.5B ENCORE III IT program

Share post:

The Department of Defense via the Inspector General’s Office (OIG) has issued a report highlighting serious vulnerabilities with the ENCORE III program, a large-scale IT endeavor with a $17.5 billion budget that delivers IT services and solutions to the Department of Defense and other agencies.

According to the report, contractors earned millions of dollars without sufficient verification of their work as a result of untrained overseers in charge of regulating contractor performance and monitoring project development. The report revealed that many of the CORs lacked the proper credentials. As a result, $24.2 million was given to contractors without reasonable certainty that contractor information technology services satisfied task order criteria.

The OIG says contracting officers representatives (CORs) appointed to manage the program were determined to be untrained, despite the fact that they were in charge of confirming payments and ensuring that the work conducted matched ENCORE III criteria.

The report, which only covered five of the ongoing 25 task orders, revealed that CORs failed to maintain consistent documentation of contractor performance inspections, failed to submit timely surveillance reports to contracting officers, and failed to review contractor interim vouchers to prevent improper payments. The report emphasizes the possibility of more waste inside the program, and the OIG recommends prompt action to address the concerns raised in the report.

The sources for this piece include an article in TheRegister.

Featured Tech Jobs

SUBSCRIBE NOW

Related articles

Cyber Security Today, Week in Review for week ending Friday, April 26, 2024

This episode features a discussion on the latest in the Change Healthcare ransomware attack, a vulnerability in an abandoned Apache open source project, the next step in Canada's proposed critical infrastructure cybersecurity law and the future

Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

This episode reports on the malicious plugin worm that refuses to die

Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

This episode reports on the danger of using expired open-source packages, a tool used by a Russian hacking group and passw

Google Play introduces new biometric verification with a user warning

Google has recently announced updates to the biometric verification process for Google Play purchases, aiming to bolster security...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways