The US Department of Justice has raised concerns about the FBI’s handling of digital data, computer hardware, and electronics that are destined for destruction. In a letter made public this week, DOJ Inspector General Michael Horowitz expressed worries about the FBI’s digital security practices as a result of an ongoing audit into the bureau.
One of the main issues identified by the DOJ is the FBI’s inventory management and disposition procedures for electronic storage media containing sensitive but unclassified information. This includes law enforcement sensitive information as well as classified national security information. Horowitz highlighted significant weaknesses in the FBI’s handling of these items and raised concerns about the physical security over these items at an FBI-controlled facility where media destruction takes place.
The DOJ is calling for the FBI to label electronic storage media, such as hard drives, SSDs, and USBs, with security classification labels to indicate who can access the data inside. Additionally, Horowitz pointed out that the FBI lacks proper policies around file transfers, which involve moving or copying items from one electronic device or drive to another.
The FBI’s Media Destruction Team is responsible for destroying electronics that are no longer usable or identifiable. This includes computers, laptops, printers, fax machines, TVs, and digital cameras. Once these electronics have been rendered beyond recognition, they are either melted, recycled, or burned to ensure that the data cannot be recovered.
The DOJ is urging the FBI to improve its physical security measures at the media destruction facility. Horowitz’s letter included photos of open pallets with exposed electronics and malfunctioning security cameras, highlighting the need for better security protocols. The FBI has reportedly admitted to not keeping detailed inventories of hard drives and thumb drives scheduled for destruction, prompting the DOJ to push for a revamp of the bureau’s security practices.
In conclusion, the concerns raised by the DOJ regarding the FBI’s handling of digital data and electronics destined for destruction highlight the importance of robust security measures in safeguarding sensitive information. It is crucial for the FBI to address these weaknesses and implement stricter protocols to ensure the protection of classified and sensitive data throughout the disposal process.