Abstract : To gather data on assessments of the effectiveness of DoD information assurance policies, procedures, and practices, DoD developed a GISR Act collection matrix for automated information systems. DoD selected a sample of 560 automated information systems from the almost 4,000 automated information systems in DoD. For those 560 systems, DoD reported the aggregate results of the assessments for FY 2001 in "GISR Report FY01: Government Information Security Reform Act, Report of the Department of Defense," October 2001. Of the 560 systems, the Office of the Inspector General of the Department of Defense, the Defense Information Systems Agency Inspector General, and Military Department audit agencies assessed a sample of 115 systems. This report is one in a series of GISR Act audits and is an assessment of the Defense Security Assistance Management System. The Defense Security Assistance Management System is a mission-essential system developed to produce and track security assistance-related contractual documents (sales agreements between governments).