Audit Reveals Critical Security Gaps in FBI’s Handling of Sensitive Storage Media
A recent audit conducted by the Department of Justice’s Office of the Inspector General (OIG) has uncovered alarming security shortcomings within the Federal Bureau of Investigation (FBI) regarding the management of sensitive storage media slated for destruction. The audit revealed significant flaws in the FBI’s procedures for tracking and securing electronic storage devices containing sensitive information, including classified national security information (NSI).
According to the OIG report, the FBI has been failing to adequately label, store, and secure decommissioned electronic storage media, such as internal hard drives and thumb drives. These devices often contain sensitive but unclassified law enforcement information and classified NSI. The audit found that these items were stored unsupervised on pallets for extended periods at an FBI-controlled facility intended for their destruction, raising serious concerns about the security of such sensitive storage media.
The report highlighted critical deficiencies in the FBI’s inventory management and disposition procedures for these devices. The agency struggled with tracking internal hard drives, including those removed from Top Secret computers, and could not always verify their destruction. The audit emphasized the need for improved physical security measures at the facility where media destruction occurs, as contractors involved in the sanitization and destruction of these devices have access to protected information, including classified data.
In response to the audit findings, the OIG has made several recommendations for the FBI to address the identified concerns. These recommendations include developing and implementing more robust policies for inventory management, ensuring proper labeling of electronic storage media according to sensitivity levels, and enhancing physical security measures at the media destruction facility. The FBI’s Asset Management Unit (AMU) is at the center of this issue, overseeing the processing, sanitization, destruction, and disposal of electronic media from various FBI locations. Immediate attention is needed to enhance the security of sensitive storage media and prevent unauthorized access or misuse.