The access-control audit had an access problem.
Peer reviewers could not open an Army audit about system access controls.
What happened
The October 22, 2026 external peer review of Army Internal Review, posted to Oversight.gov on October 27, could not examine five of 32 sampled projects. Four files at Human Resources Command were inaccessible after their auditors left; a fifth file at Army Futures Command was lost during a cloud migration.
One of the inaccessible Human Resources Command projects was the 2022 audit of the command's system access controls. Remaining staff said the software lacked an administrator override or universal access without the original auditor's credentials or permissions.
Why CMCoE cares
Audit work cannot support later accountability if the evidence becomes inaccessible with the people who prepared it. The wider reviewed portfolio included construction payments, IT equipment and interagency purchase requests.
Regulatory fine print
The overall rating was pass with deficiencies, with a scope limitation, not fail. The nonstatistical sample covered projects completed in 2022–2024 and does not establish an Army-wide loss rate. Not all five unavailable projects were procurement audits. Army concurred with the rating and most findings and planned policy, training and tool improvements by December 31, 2026. It said four of five monitoring failures predated earlier corrective action and the fifth had already been identified internally. Access denied is invented satire, not a quoted software message or a finding of intentional obstruction.
Sources
- DOWIG-2027-007, scope limitation, project tables and Army response (Department of War Office of Inspector General, )
- Official registry entry, posted October 27 (Oversight.gov, )