The three web systems supporting the U.S. Army Family Morale Welfare and Recreation Command (including the ACS Staff, Army OneSource, and Virtual Family Readiness Group web systems), have been through extensive government mandated security and threat vulnerability implementation and testing to protect the users and information. FMWRC received an Authority to Operate (ATO) for all of these web systems in compliance with the Department of Defense (DoD) Information Assurance Certification and Accreditation Process (DIACAP) in FY09. Periodic vulnerability assessments will be conducted by the Defense Information Systems Agency (DISA) to ensure protective controls are maintained during the lifecycle of these systems.