The Board Should More Effectively Manage and Secure Its Inventory of Unassigned Laptops and Hard Drives Ready for Disposal

A lack of standardization in managing IT assets increases the risk that Board data may be exfiltrated.

We found that the Board does not consistently track and account for all its laptops. For example, 677 laptops worth over $1.4 million sat uninventoried and in storage for 8 months before being properly inventoried in March 2026. Further, a few laptops were still in the possession of former employees, putting data at risk of compromise. Among other issues we identified, some IT asset storage rooms, though secured, lack safeguards like access logs.

We have seven recommendations to ensure that the Board standardizes inventory management consistent with leading practices.

Photograph of untagged laptops in storage.