“We determined whether DOD Components sanitized and disposed of excess unclassified information technology (IT) equipment in accordance with Federal and DOD requirements. We also determined whether the Defense Reutilization and Marketing Service (DRMS) disposed of excess IT equipment in accordance with security requirements; and whether the Army, Navy, and Air Force properly safeguarded sensitive information on excess unclassified IT equipment. We visited 6 DOD Components, 9 DRMS processing centers, and 2 contractors and selected a nonstatistical sample 543 of 4,105 pieces of excess unclassified IT equipment. What We Found: DOD Components internal controls were not adequate. Specifically, DOD Components did not properly sanitize, document, or fully account for excess unclassified IT equipment before releasing the equipment to other organizations. Furthermore, DRMS processing centers processed excess unclassified IT equipment for disposal or redistribution without proof that equipment had been properly sanitized.”
Sorry, comments are closed for this post.