Expands the main menu

Audit Reports

  • Mobile Delivery Service Security Controls Cover
Jul
07
2023
Report Number:
22-175-R23
Report Type:
Audit Reports
Category: Security, Internal Services

Mobile Delivery Device Security Control Assessment

Background

The U.S. Postal Service (USPS) must provide customers and employees visibility into where packages are in the mail stream to be competitive and support package growth. The Postal Service recently purchased and deployed 284,000 Mobile Delivery Device-Technology Refresh (MDD‑TR) scanners at Postal facilities. Carriers use these handheld scanners to track package delivery in real-time. These scanners are supported by multiple cellular service providers to collect and transmit data to other Postal Service applications. Therefore, adequate security controls and scanning accuracy are important to protect Postal Service resources and support growth in the package delivery business.

What We Did

Our objective was to assess the security controls of the MDD‑TRs deployed at Postal Service facilities. Specifically, we performed testing on the devices using automated tools and manual review techniques to evaluate the devices’ security controls and functionality.

Report Recommendations

# Recommendation Status Value Initial Management Response USPS Proposed Resolution OIG Response Final Resolution
1

Some or all of the recommendation is not publicly available due to concerns with information protected under the Freedom of Information Act.

 Closed $0 Agree
2

Some or all of the recommendation is not publicly available due to concerns with information protected under the Freedom of Information Act.

 Closed $0 Agree
3

Perform security testing on the Mobile Delivery Devices -Technical Refresh scanners to ensure compliance with internal policy.

 Closed $0 Agree
4

Some or all of the recommendation is not publicly available due to concerns with information protected under the Freedom of Information Act.

 Closed $0 Agree