Inventory records of devices with sensitive intel weren't maintained, and in some cases, contained inaccurate information, according to a DOD OIG report.
Rule applies to the executive branch — with exemptions for national security, law enforcement and research — and doesn't appear to cover Congress itself.