Expands the main menu

Audit Reports

Mar
25
2022
Report Number:
21-191-R22
Report Type:
Audit Reports
Category: Security, Technology

U.S. Postal Inspection Service’s Online Analytical Support Activities

Background

The U.S. Postal Inspection Service’s Analytics and Cybercrime Program provides investigative, forensic, and analytical support to field divisions and headquarters. A core component of this program is the Internet Covert Operations Program (iCOP), established in 2018 to provide analytics support for online investigations. Analysts respond to requests for assistance from postal inspectors and proactively gather intelligence using cryptocurrency analysis, open-source intelligence, and social media analysis. In April 2021, iCOP was renamed the Analytics Team.

What We Did

This report responds to a request from the House of Representatives Committee on Oversight and Reform to evaluate the Postal Inspection Service’s online analytical support activities, including its statutory authority and processes for these activities, and any related contracts. We reviewed 434 online analytical support requests from a statistical sample of 160 cases and 70 reports produced by iCOP to assess whether these activities were authorized. We also reviewed policies, procedures, and contracts associated with iCOP and the Analytics Team.

Report Recommendations

# Recommendation Status Value Initial Management Response USPS Proposed Resolution OIG Response Final Resolution
1

Conduct a full review of the Analytics Team's responsibilities, activities, procedures, and any other associated guidance; and develop a process to ensure that all online analytical support activities conducted by the Postal Inspection Service are authorized.

 Closed $0 Agree
2

Modify the Analytics Team's Standard Operating Procedures to require the Office of Counsel to document its approval of all predefined keywords used for proactive intelligence searches, including approval for any changes to the predefined keywords.

 Closed $0 Agree
3

Modify the Analytics Team's Standard Operating Procedures to clarify documentation requirements for Requests for Assistance, to include requiring postal inspectors to document the postal nexus in their requests.

 Closed $0 Agree
4

Modify the Analytics Team's Standard Operating Procedures to require the Office of Counsel to document its approval of proactive work assignments at the time they are initiated.

 Closed $0 Agree
5

Modify the Analytics Team's Standard Operating Procedures to require that all reports identify the postal nexus.

 Closed $0 Agree
6

Develop procedures for retaining documentation associated with work completed by the Analytics Team and storing sensitive information to ensure compliance with Postal Service policy.

 Closed $0 Agree