Hundreds of Laptops Missing at State Department, Audit Finds

Hundreds of Laptops Missing at State Department, Audit Finds
Hundreds of Laptops Missing at State Department, Audit Finds

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

Content-Transfer-Encoding: QUOTED-PRINTABLE

By Jeff Stein
CQ National Security Editor
May 2, 2008

Hundreds of employee laptops are unaccounted for at the U.S. Department 
of State, which conducts delicate, often secret, diplomatic relations 
with foreign countries, an internal audit has found.

As many as 400 of the unaccounted for laptops belong to the department=E2=80=99s 
Anti-Terrorism Assistance Program, according to officials familiar with 
the findings.

The program provides counterterrorism training and equipment, including 
laptops, to foreign police, intelligence and security forces.

Ironically, the Anti-Terrorism Assistance Program is administered by the 
State Department=E2=80=99s Bureau of Diplomatic Security (DS), which is 
responsible for the security of the department=E2=80=99s computer networks and 
sensitive equipment, including laptops, among other duties. It also 
protects foreign diplomats during visits here.

DS officials have been urgently dispatching vans around the bureau=E2=80=99s 
Washington-area offices to collect and register employee laptops, said 
department sources who could not speak on the record for fear of being 

The inventory sometimes strips DS investigators of their laptops for 
=E2=80=9Cdays, or weeks,=E2=80=9D they said.

The State Department=E2=80=99s Inspector General launched an audit of the 
equipment about three months ago. Only the first stage, or inventory of 
equipment, has been completed.

A State Department official referred all questions regarding laptop 
losses to the Inspector General.

A senior IG official, asking not to be identified, said he could =E2=80=9Cnot 
comment on ongoing work.=E2=80=9D

Nita M. Lowey , D-N.Y., who heads a House Appropriations subcommittee 
that oversees State Department operations, said she was concerned about 
the security revelations.

=E2=80=9CThe importance of safeguarding official laptops and office equipment 
containing sensitive information is not a new concern,=E2=80=9D she said through 
a spokesman. =E2=80=9CI intend to review the facts about this situation.=E2=80=9D

=E2=80=9CUnaccounted for=E2=80=9D does not necessarily mean the laptops have been lost. 
But they are =E2=80=9Cmissing=E2=80=9D until they have been found or otherwise accounted 

Auditors found that the department had lost track of $30 million worth 
of equipment, according to one official, =E2=80=9Cthe vast majority of which . .
=2E perhaps as much as 99 per cent,=E2=80=9D was laptops.

Calculating that the average State Department laptop costs $3,000, 
another official said, hundreds, perhaps as many as a thousand, were 
missing. It could not be learned how many employees have been issued 

On Feb. 6, the department=E2=80=99s Senior Assessment Team gathered at the State 
Department headquarters in Foggy Bottom to discuss the security of 
=E2=80=9Cpersonal identification information.=E2=80=9D

The department=E2=80=99s official in charge of computer equipment, John 
Streufert, warned the more than two dozen officials present that the 
department did not have good records of its inventory.

A =E2=80=9Csignificant deficiency=E2=80=9D relating to laptops existed, Streufert said, 
according to a source who attended the meeting.

Mark Duda, a representative of the Inspector General=E2=80=99s office at the 
meeting, warned the managers that they needed to get on top of the 
equipment issue before it =E2=80=9Cblows up.=E2=80=9D He said a scandal loomed akin to 
the one that engulfed the Veterans Administration in 2006, when news 
broke that a VA official had taken home a laptop with the personal 
records of 26 million veterans, where it was stolen.

The official who chaired the meeting, Christopher Flaggs, the 
department=E2=80=99s deputy chief financial officer, also warned that revelation 
of the laptop losses could develop into a =E2=80=9Cmaterial weakness,=E2=80=9D an 
accounting term-of-art that essentially means inventories are out of 

=E2=80=9CIt=E2=80=99s the worst flaw you can have in management control,=E2=80=9D one close 
observer of the State Department=E2=80=99s problems said.

It would have to alert the White House Office of Management and Budget 
(OMB) and Congress. There could be hearings, headlines, camera crews on 
the doorstep of State Department officials.

That=E2=80=99s what happened in 1999, when a laptop containing the names of 
foreign agents working for the U.S. government was stolen from the State 

The security of laptops has vexed federal officials, as well as private 
industry, for years. The CIA, FBI and other national security agencies 
have all lost significant numbers of laptops containing sensitive 

More than a year ago, the administration=E2=80=99s Identity Theft Task Force 
warned of security vulnerabilities within the government=E2=80=99s Internet 
technology systems.

In May 2007, OMB had ordered all federal departments and agencies to 
=E2=80=9Cdevelop and implement a breach notification policy within 120 days=2E=E2=80=9D

Hints of the State Department=E2=80=99s laptop losses first surfaced March 31 in 
an anonymous post at an obscure Web site frequented by employees of the 
Bureau of Diplomatic Security, called Dead Men Working.

=E2=80=9CWe=E2=80=99re not talking about a missing laptop or two,=E2=80=9D said a poster who 
identified himself as =E2=80=9CSteve.=E2=80=9D

=E2=80=9CA Department-wide audit found hundreds of laptops unaccounted for and 
identified DS, now rushing to close the barn door before the scandal 
really breaks, as having the laxest control of any bureau in the 
agency,=E2=80=9D Steve wrote.

John Naland, a retired diplomat who is president of the American Foreign 
Service Association, said the alleged losses were worrisome, and 

=E2=80=9CIf the missing ones might have contained classified data, this could be 
serious,=E2=80=9D Naland said.

=E2=80=9CAt my last overseas post, we did not have any laptops,=E2=80=9D Naland 
continued. =E2=80=9CBut we sure did an annual serial number physical inventory 
of computers. Sometimes our initial count came up with discrepancies, 
but then we remembered that we returned one to Washington or whatever 
and that cleared up the paperwork discrepancy.=E2=80=9D

CQ =C2=A9 2007 All Rights Reserved | Congressional Quarterly Inc. 1255 22nd 
Street N.W. Washington, D.C. 20037 | 202-419-8500

Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Attend Black Hat USA, August 2-7 in Las Vegas, 
the world's premier technical event for ICT security experts.
Featuring 40 hands-on training courses and 80 Briefings 
presentations with lots of new content and new tools.
Network with 4,000 delegates from 50 nations.  
Visit product displays by 30 top sponsors in 
a relaxed setting. 

Site design & layout copyright © 1986-2014 CodeGods