Inspector General Robert P. Storch announced today that the Department of Defense Office of Inspector General (DoD OIG) released the “Audit of Cybersecurity of DoD Classified Mobile Devices.” The audit reviewed the effectiveness of select cybersecurity controls to protect DoD classified mobile devices and the classified information accessed, transferred, and stored on those devices.
The DoD OIG determined, amongst other things, that DoD Components did not maintain complete or accurate inventory records for classified mobile devices, include all the required elements in Component classified mobile device training and user agreements, and annually review and approve incident response plans. The report includes 40 recommendations to improve cybersecurity for the DoD’s classified mobile device programs.
“The DoD OIG has previously identified cybersecurity threats as a Top DoD Management and Performance Challenge,” said IG Storch. “Security for DoD mobile devices is essential for safeguarding national security, protecting classified data, and ensuring the integrity of the DoD’s missions. In today’s digital environment, mobile devices are indispensable tools that provide the DoD’s workforce with the flexibility and efficiency required to meet their responsibilities. However, they are also a primary target for cyber threats which could compromise data and the national security landscape. Securing these devices is not merely a technical priority; it’s a critical operational mandate that enables the DoD to fulfill its mission safely and effectively.”
The DoD OIG will monitor progress toward implementing the recommendations in this report.