Six Pages, One Reference Number
The record consists of two attachments to a single final report, filed under case reference 2107-0022-AS. Attachment A is the System Review Report; Attachment B is the Letter of Comment. Together they constitute the CIA Office of Inspector General’s external peer review of the Defense Intelligence Agency’s Office of Inspector General, specifically its Audit Staff. The report is dated September 29, 2017. The quality-control period it examined runs for three years, closing on April 30, 2017.
The documents entered the CIA’s FOIA Reading Room under case number F-2019-01011, with agency approval for release recorded in December 2019. They were publicly indexed on The Black Vault on April 9, 2024, having been provided by the family of Russell Charles Kick III, the writer and transparency activist who died on September 12, 2021. Dr. Susan Maret, a lecturer in library and information science at San José State University’s School of Information, facilitated the transfer of Kick’s papers to The Black Vault, which describes the deposited materials as a selection rather than a complete archive.
The System, Not the Audits
The peer review was structured around one specific question: did the DIA OIG Audit Staff maintain a quality control system that was appropriately designed and, in practice, working as intended? The CIA OIG reviewers interviewed DIA OIG personnel, developed an understanding of how the quality control system was built, and selected a cross-section of audits and administrative files to test against professional standards and internal compliance requirements. Their emphasis, the report states, was on more current work within the three-year window.
What the reviewers were not doing is equally defined by the document. They did not assess the substantive accuracy or conclusions of any individual audit the DIA OIG produced. A quality control review of this kind addresses process and structure; it says nothing, one way or the other, about whether the underlying audits got things right.
Separately, certain limited procedures were applied to the DIA OIG’s monitoring of Independent Public Accountants, contractors engaged to perform audits under agreement with the DIA OIG. The report explicitly places these procedures outside the scope of Government Auditing Standards, the professional framework governing the main review, and they produced no formal opinion on the quality of the contractors’ work.
Pass
The CIA OIG concluded that the DIA OIG Audit Staff’s quality control system was suitably designed and operating effectively for the three-year period ending April 30, 2017. The formal rating assigned is “pass,” the highest of three possible outcomes under the CIGIE (Council of the Inspectors General on Integrity and Efficiency) peer review framework; the others are “pass with deficiencies” and “fail.”
Attachment B, the Letter of Comment, records certain findings that the reviewers determined were not of sufficient significance to affect the overall rating. The DIA Acting Inspector General concurred with the recommendation the letter contained. The report also notes that on May 1, 2017, the DIA Assistant Inspector General for Audits released version 5.0 of the DIA’s Auditor’s Handbook, updated to incorporate Government Auditing Standards requirements and lessons drawn from quality assurance activities. The existence of findings in the Letter of Comment and the handbook revision together indicate that the review produced observations worth recording; those observations, as the reviewers judged them, simply did not rise to the level required to qualify the rating.
Standard Instrument, Expected Outcome
Peer reviews of this kind are a standard accountability mechanism within the federal inspector general system. Under Government Auditing Standards and CIGIE policy, each federal OIG audit organization is subject to an external peer review on a recurring cycle, conducted by another OIG. The process exists to generate independent verification of internal quality control, and a “pass” rating is the typical result for a unit whose systems are functioning. Nothing in the structure, language, or conclusions of this report departs from what such a document is built to produce.
Read on its face, the record is an administratively complete compliance artifact. The governing frameworks are correctly cited. The scope is defined in standard terms. The rating category is drawn from the three categories the system provides. Nothing in the source contradicts a reading of this report as a standard triennial review that reached a routine conclusion.
The Reviewers Have No Names Here
Four specific absences are worth stating plainly as facts about the paperwork.
The names of the CIA OIG personnel who conducted the review and produced the report do not appear in the publicly released text. The document identifies the CIA OIG as the reviewing organization, but individual names are not stated.
The names of the DIA Acting Inspector General who concurred with the Letter of Comment’s recommendation, and of the DIA Assistant Inspector General for Audits who issued the revised handbook, are given by title only. The released documents do not supply them.
The identity of whoever submitted CIA FOIA Case No. F-2019-01011 is not recorded in the available record.
The Black Vault’s description of the source materials refers to “the CIA’s response to a FOIA request.” The CIA OIG and the CIA are distinct entities, and the body under review is the DIA OIG, not the CIA OIG in any substantive capacity. The source text does not explain the phrasing, and whether it reflects editorial shorthand or points to something in the underlying paperwork is not established by anything in the record.
Finally, The Black Vault notes explicitly that what was transferred from Kick’s papers is a selection. What other documents he held on this or related subjects, and where his full papers now reside, the record does not say.