Recommendation: The Chairman of the Federal Communications Commission should determine and execute a methodology for collecting and analyzing data—such as conducting a new pilot program regarding off-premises wireless access or analyzing other data—to assess the potential benefits, costs, and challenges of making off-premises wireless access eligible for E-rate program support, and publish the results of this analysis. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: FCC officials informed us in July 2020 that FCC plans to implement this recommendation by completing an evaluative report on the E-rate pilot program. While FCC planned to implement this recommendation by July 2020, there have been delays related to COVID-19.

Recommendation: The Chairman of FCC should track the growth in high bandwidth IoT devices, such as video-streaming devices and optical sensors. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: FCC said that it believes it is best to monitor growth of overall Internet traffic and will work with industry and its Technological Advisory Council to monitor growth and ensure that communications infrastructure is sufficient to support the needs of the growing Internet sector. As of October 2019, FCC has not changed its position.

Recommendation: The Chairman of FCC should track the growth in IoT devices relying on unlicensed spectrum. (Recommendation 2)

Agency: Federal Communications Commission
Status: Open

Comments: FCC said that it believes the best way to track growth in IoT devices using unlicensed spectrum it to monitor relevant information, such as published papers and conferences, and work with industry. As of October 2019, FCC has not changed its position and stated that it will be taking no further action.

Recommendation: The Under Secretary of Defense for Intelligence, in coordination with the DOD Chief Information Officer, the Under Secretaries of Defense for Policy; Acquisition, Technology, and Logistics; and Personnel and Readiness; and with military service and agency stakeholders, should conduct operations security surveys that identify IoT security risks and protect DOD information and operations, in accordance with DOD guidance, or address operations security risks posed by IoT devices through other DOD risk assessments.

Agency: Department of Defense: Office of the Under Secretary of Defense for Intelligence
Status: Open

Comments: DOD concurred with this recommendation. We reached out to DOD in August 2018 on this recommendation and are awaiting their response.

Recommendation: The Principal Cyber Advisor, in coordination with the DOD Chief Information Officer; the Under Secretaries of Defense for Policy; Intelligence; Acquisition, Technology, and Logistics; and Personnel and Readiness; and with military service and agency stakeholders, should (1) review and assess existing departmental security policies and guidance--on cybersecurity, operations security, physical security, and information security--that may affect IoT devices; and (2) identify areas where new DOD policies and guidance may be needed--including for specific IoT devices, applications, or procedures--and where existing security policies and guidance can be updated to address IoT security concerns.

Agency: Department of Defense: Office of the Principal Cyber Advisor to the Secretary of Defense
Status: Open

Comments: DOD concurred with this recommendation. DOD has implemented one geo-location policy in 2018 relating to operations security that addresses a portion of this recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Commerce should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of Commerce
Status: Open

Comments: As of January 2020, the Department of Commerce had not implemented this recommendation. In July 2018, the department provided an inventory that shows, by service provider and department component, the number of devices per rate plan and monthly rate; however, the inventory did not include the number of voice minutes, gigabytes of data, and text messages allowed per line per month. Furthermore, the department had not demonstrated that it had accounted for all of its mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Commerce should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Commerce
Status: Open

Comments: As of January 2020, the department had not addressed the recommendation. In July 2018, the department described steps it was taking to identify lines that were inactive for a period of three or more continuous months (zero usage). However, as of January 2020, the department had not demonstrated that it has established documented procedures that address the elements of our recommendation. We will continue to monitor the department's progress.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Defense should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of Defense
Status: Open

Comments: The Department of Defense partially concurred with our recommendation; however, as of January 2020, the department had not implemented it. In response to our report, the department stated that it agreed that such an inventory has merits, but that maintaining one comes at considerable expense and effort. The department also stated, in 2016, that while it does not maintain a single, centralized device level inventory, the military departments track and manage their own devices and services . As we stated in our report, the inventory need not be generated centrally at the headquarters level; the department can compile a comprehensive inventory using its components' complete inventories. As of January 2020, the department had not demonstrated that all its components had inventories of unique devices and associated services. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Defense should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense stated that it partially concurred with our recommendation; and has taken steps to address it. However, as of January 2020, the department had not demonstrated that it had implemented the recommendation. In response to our report, the department stated that it agreed that developing an inventory of mobile device contracts has merits, especially in a time of restricted government spending. The department also described several efforts it had undertaken to enhance mobile device management. However, as we stated in our report, any approach to managing mobile device contracts will be hampered by the lack of complete information on the contracts that are already in place. In August 2018, the department developed an inventory of mobile service contracts. However, the department had not demonstrated that the inventory included all its components' mobile service contracts. In August 2019, the department described steps it was taking to ensure that it has a complete inventory of mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Health and Human Services should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Health and Human Services
Status: Open

Comments: As of December 2019, the Department of Health and Human Services had not implemented this recommendation. We will continue to monitor the department's implementation of this recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Homeland Security should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Homeland Security
Status: Open

Comments: In October 2019, the Department of Homeland Security developed an asset and inventory management plan for managing devices under its enterprise blanket purchase agreement. The plan includes procedures for assessing devices for zero usage; however, it does not include procedures for assessing over and under usage. The department also has not demonstrated that it has established procedures for devices not covered by its enterprise blanket purchase agreement.We will continue to monitor the department's efforts.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Interior should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of the Interior
Status: Open

Comments: The Department of the Interior has not demonstrated that it has fully implemented this recommendation. As of January 2020, the department demonstrated that only one of its components, the Bureau of Reclamation, had an inventory of mobile devices and associated services. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Interior should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of the Interior
Status: Open

Comments: As of January 2020, the Department of the Interior had not demonstrated that it had fully addressed this recommendation. In August 2019, the department developed an inventory of mobile service contracts. However, the department did not demonstrate that it had accounted for all of its mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Attorney General should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Justice
Status: Open

Comments: As of January 2020, the Department of Justice has made progress implementing this recommendation; however, more remains to be done. Specifically, in response to our findings, in April 2015, the department's Chief Information Officer issued a memo that required components to establish procedures for regular reviews of invoices for wireless services to identify unused and underused devices or services, as well as any over-usage charges to service plans. One of the components we reviewed, the Federal Bureau of Investigation, established procedures in July 2016 to monitor mobile device usage. In addition, the Justice Management Division (JMD) established procedures in May 2019 that apply to JMD as well some but not all other components. The other component we reviewed in our report, the Drug Enforcement Agency, had not established procedures that address our recommendation. We will continue to monitor the department's progress.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of State should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of State
Status: Open

Comments: As of January 2020, the Department of State had not demonstrated that it has implemented this recommendation. The department has inventories of mobile device; however, the inventories do not include the services associated with each device. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of State should ensure a reliable department-wide inventory of mobile service contracts is maintained.

Agency: Department of State
Status: Open

Comments: As of January 2020, the Department of State had not implemented this recommendation. In June 2019, the department said it has a Telecom Expense Management System which can be used to document an inventory of domestic service contracts; however, the department did not provide the inventory. Furthermore, the department did not demonstrate that it has an inventory of international service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Transportation should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Transportation
Status: Open

Comments: As of January 2020, the Department of Transportation had not addressed the recommendation. In December 2019, an official from the department's Audit Relations and Program Improvement office stated that all the department's telecommunication devices are managed through two programs and that these programs have mechanisms in place to ensure that telecommunications are managed in an effective and efficient manner. However, as of January 2020, the department had not provided evidence to demonstrate that it had implemented the recommendation. We will continue to monitor the department's efforts.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not implemented the recommendation. In August 2019, the department stated that it had established enterprise-wide procurement vehicles for mobile devices. However, as of January 2020, the department had not demonstrated that it has an inventory of mobile devices and associated service information. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure a complete inventory of mobile devices and associated services is established.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not implemented the recommendation. We reported in May 2015, that NASA had an inventory of mobile devices and associated service information which included most, but not all, of the devices used by the agency. In November 2019, NASA's Office of the Chief Information Officer (OCIO) stated that the agency was in the process of enrolling devices in a new mobile device management tool, and that when the approximately 15 percent of devices that are not currently on NASA's new End-User Services Technology contract are brought on the contract, NASA will have a monthly deliverable depicting the services of all mobile devices. We will continue to monitor NASA's implementation of this recommendation.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure a reliable inventory of mobile service contracts is developed and maintained.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not demonstrated that it has implemented the recommendation. NASA's Office of the Chief Information Officer (OCIO) stated that NASA had established, on September 1, 2019, the NASA End-User Services and Technology contract to procure mobile services, but as of November 2019, had not yet included 15 percent of its devices on the new contract. We will continue to monitor NASA's efforts to develop and maintain a mobile services contract inventory as described in our report.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure procedures to monitor and control spending are established agency-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not demonstrated that it had implemented the recommendation. In November 2019, NASA's Office of the Chief Information Officer (OCIO) stated that as part of enterprise mobility service contract deliverables, NASA requires monthly reports to monitor and optimize usage (zero, under, and over). NASA's OCIO also stated that the agency established role-based privileges to monitor and report on this activity agency-wide. However, the agency has not demonstrated that it has established procedures to assess device usage in accordance with our recommendation. We will continue to monitor NASA's implementation of the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not demonstrated that it has implemented the recommendation. In August 2019, an official from the department's Office of the Chief Information Officer stated that the department was collecting and analyzing information on voice and data utilization. However, as of January 2020, the department had not demonstrated that it had established procedures in accordance with our recommendation. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: Congress should consider whether FCC's excess fees (approximately $66 million through fiscal year 2011) should be appropriated for FCC's use, or, if not, what the disposition of these funds should be, and whether to change FCC's annual appropriations language to permit reconciliation of excess collections or to govern FCC's handling of any future excess collections.

Agency: Congress
Status: Open

Comments: As of fiscal year 2019, FCC's annual appropriations continued to prohibit the use of any excess fees from the current year or previous years.

Recommendation: Congress may wish to consider requiring the Departments of Justice, Homeland Security, and Treasury to collaborate on the development and implementation of a joint radio communications solution. Specifically, Congress may wish to consider requiring the departments to (1) establish an effective governance structure that includes a formal process for making decisions and resolving disputes, (2) define and articulate a common outcome for this joint effort, and (3) develop a joint strategy for improving radio communications.

Agency: Congress
Status: Open

Comments: Legislation has been enacted to provide funding for, among other things, the development of a nationwide, interoperable broadband network that is aimed at improving interoperable radio communications among public safety officials. However, the use of the broadband network by public safety users will be voluntary. In addition, officials from the Departments of Justice, Homeland Security, and the Treasury stated that, once mission-critical voice capabilities have been developed for the broadband network, their respective departments will determine whether they will use the network to support their mission-critical operations. Therefore, until the three departments have the information they need to make a decision to use the nationwide public safety broadband network to support mission critical voice capabilities, it is uncertain if the legislation will remedy these agencies' fragmented approaches to improving interoperable radio communications. As of March 2020, there has been no legislative action taken in the current Congress.