It's not all their fault, though — department policies to distinguish between personal and professional aren't super clear.

Lack of clear communication from leadership is to blame, investigators argue.

There are about 150 open cybersecurity oversight recommendations the Pentagon still needs to deal with, and some are more than just a few years old.

The agency has mobile device management software but could be using it better.

Overpayments will need to be repaid by veterans, the IG says.

The Navy, Marine Corps and Air Force don't have consistent processes in place for software rationalization.