The July 27, 2017, Government Accountability Office report finds that although the Defense Department "has begun to examine security risks of IoT devices through its infrastructure-related and intelligence assessments, the department has not conducted required assessments related to the security of its operations."