Article Details

Audit finds notable security gaps in FBI's storage media management. An audit from the Department of Justice's Office of the Inspector General (OIG) identified "significant weaknesses" in FBI's inventory management and disposal of electronic storage media containing sensitive and classified information. The report highlights multiple issues with policies and procedures or controls for tracking storage media extracted from devices, and significant physical security gaps in the media destruction process. The FBI has acknowledged these issues and is in the process of implementing corrective actions based on the recommendations from OIG. OIG's findings OIG's audit highlights several weaknesses in FBI's inventory management and disposal procedures for electronic storage media containing sensitive but unclassified (SBU) as well as classified national security information (NSI). The three key findings are summarized as follows: Recommendations and FBI's response The OIG has made three specific recommendations to the FBI to address the identified problems. FBI acknowledged the audit's findings and stated it is in the process of developing a new directive titled "Physical Control and Destruction of Classified and Sensitive Electronic Devices and Material Policy Directive." This new policy is expected to address the problems identified in the storage media tracking and classification markings. Additionally, the FBI said it is in the process of  installing protective "cages" to use as storage points for the media, which will be covered by video surveillance. OIG expects the FBI to update it on the status of implementing the corrective actions within 90 days.