U.S. Department of the Interior's Management of its Smartphones, Tablets, and Other Mobile Devices

We audited DOI’s management of smartphones, tablets, and other mobile devices to determine whether DOI effectively managed its costs. We also assessed the adequacy of DOI’s controls to lower security risks unique to mobile devices. We found weaknesses in DOI’s mobile device management practices that resulted in excess spending on unused mobile devices. We also found DOI’s inventory of mobile devices and services to be incomplete and also found that DOI had not implemented a Departmentwide approach to procuring and managing these devices. More importantly, thousands of DOI’s mobile devices do not have proper security configurations, which could result in cybercriminals accessing unauthorized data.