DoD FM

Access Baseline Drift Monitoring Agentic Workflow Automation

Medium priorityHigh riskDerived/normalized from public DoD FM source and established financial-sector AI patternTier 0 — Audit data foundationHigh complexity

Description

Coordinate multistep tasks for access baseline drift monitoring: gather data, build an evidence package, draft analysis, route for review, and record decisions with audit logs. The MVP would connect ICAM, SailPoint, MyAuth, ERP roles, audit logs, control catalogs, system access reviews and produce read-only recommendations for DoD CIO, Component CIO/FM, System owners, OUSD(C).

AI / analytics pattern

agentic AI + workflow orchestration

Automation level / stage

supervised workflow automation

Expected benefit

End-to-end productivity gain while preserving human signoff and auditability.

Audit / financial statement impact

Control environment; reliability of financial systems and reports

Controls / human review

Human approval required before posting, payment, denial, personnel action, or official audit response; model validation; drift monitoring; exception sampling; full prompt/data/output logging. Agent must operate in read-only or draft mode during MVP; all postings/payments/responses require named human approval.

Data needed

ICAM, SailPoint, MyAuth, ERP roles, audit logs, control catalogs, system access reviews; master/reference data; audit logs; policy/control requirements; prior exceptions; relevant document evidence.

Possible metrics

cycle time reduction; workflow completion rate; human override rate; audit log completeness

MVP scope

Start with one Component/reporting entity and one subprocess (access baseline drift monitoring) for two close/audit cycles; read-only outputs first.

Related material weakness / control objective

Systems control environment and IT access controls