DOD OIG Audit – Sanitization and Disposal of Excess Information Technology Equipment

Sanitization and Disposal of Excess Information Technology Equipment (Report No. D-2009-104)

  • “We determined whether DOD Components sanitized and disposed of excess unclassified information technology (IT) equipment in accordance with Federal and DOD requirements. We also determined whether the Defense Reutilization and Marketing Service (DRMS) disposed of excess IT equipment in accordance with security requirements; and whether the Army, Navy, and Air Force properly safeguarded sensitive information on excess unclassified IT equipment. We visited 6 DOD Components, 9 DRMS processing centers, and 2 contractors and selected a nonstatistical sample 543 of 4,105 pieces of excess unclassified IT equipment. What We Found: DOD Components’ internal controls were not adequate. Specifically, DOD Components did not properly sanitize, document, or fully account for excess unclassified IT equipment before releasing the equipment to other organizations. Furthermore, DRMS processing centers processed excess unclassified IT equipment for disposal or redistribution without proof that equipment had been properly sanitized.”
  • Related on postings on recovering data from discarded or resold computers and their hard drives
    • LinkedIn
    Posted in: Government Documents, PC Security, Privacy
    ➤