The following is the April 13, 2020 Government Accountability Office report, DOD Needs to Take Decisive Actions to Improve Cyber Hygiene.
From the report
What the GAO Found?
The Department of Defense (DOD) has not fully implemented three of its key initiatives and practices aimed at improving cyber hygiene. Carnegie-Mellon University defines cyber hygiene as a set of practices for managing the most common and pervasive cybersecurity risks. In discussions with GAO, DOD officials identified three...
https://news.usni.org/2020/04/14/gao-report-on-dod-cyber-security-risks