Audit of the Cost and Security Policies and Procedures for USAID's Mobile Devices
Recommendations
After implementing Recommendation 20, USAID's Chief Information Officer, remove unapproved applications from Agency mobile devices and document their removal.
USAID's Chief Information Officer implement written procedures to maintain a centralized inventory of mobile devices on a comprehensive basis and require updating it as devices are purchased, exchanged, and returned.
USAID's Chief Information Officer implement written procedures to verify whether mobile devices on the monthly invoices are included in the Office of the Chief Information Officer's inventory and include the investigation of discrepancies.
USAID's Chief Information Officer implement written procedures to review mobile device user agreements for completeness and return all incomplete forms before approving mobile device services.
USAID's Chief Information Officer implement a written records management process to maintain and readily locate Agency user agreement forms for mobile devices.
USAID's Chief Information Officer revise Mobile Device Additional Charge Procedures to designate a time frame by when bureaus and offices must pay for additional charges and remedial action will be
taken for past due additional charges.