Answers for district IT

How do schools do a physical device inventory audit?

A device audit is a reconciliation, not a count. You walk each location with a scanner, capture every asset tag physically present, and compare that against what your records claimed was there — producing three lists: found as expected, found in the wrong place, and expected but missing. The third list is the audit's actual product. Devices out with students are covered separately through an attestation campaign rather than by chasing individual backpacks.

Decide what you are auditing before you start walking

The word audit covers several different exercises and confusing them wastes weeks. A physical inventory verifies that assets exist and are where the records say. A funding audit verifies that federally purchased equipment has the required property records. A custody audit verifies that assigned devices are still with the person the record names. These have different methods and different evidence.

For a physical inventory, scope by location type. Stationary and stored equipment — carts, labs, closets, staff desktops, projectors, spare stock — is walkable and should be swept. Devices assigned to students and taken home are not walkable, and pretending otherwise produces an audit that never finishes. Cover those with attestation instead.

Set the boundary explicitly in writing before you begin, because the first question anyone asks about the results is what was in scope. "All district-owned devices in buildings, plus an attestation campaign covering take-home assignments, conducted in April" is a defensible scope statement. "We audited the devices" is not.

Also decide the tolerance. In a fleet of ten thousand devices, some number will be genuinely unaccounted for at any moment, and the useful question is whether that number is stable and explainable rather than whether it is zero. Districts that demand a perfect result usually get a dishonest one.

Run the sweep with scanning, not clipboards

The mechanics that make this feasible: a staff member opens the audit for a location on a phone, scans every asset tag in the room, and finishes. The phone camera is a perfectly good barcode and QR scanner, which means you can put six people on a building without buying six handheld scanners.

Scan everything present, including devices you did not expect. Unexpected finds are as valuable as missing ones — a device recorded at the elementary school that is sitting in a high school closet is a record you can fix immediately, and it is often the explanation for something on the missing list.

Work location by location and close each one out. A sweep that leaves rooms half-scanned produces phantom discrepancies that eat the rest of your week. If a room cannot be completed — a locked classroom, a teacher out sick — mark it incomplete explicitly and come back, rather than letting it silently fold into the missing list.

A practical note on asset tags: audits are where poor labeling becomes expensive. If a meaningful share of your fleet has missing, worn, or unscannable tags, the sweep degrades into typing serial numbers and slows by an order of magnitude. Re-labeling as you go is worth the time, and printing new tags during the sweep is easier than a separate re-tagging project.

For carts and labs specifically, count the empty slots. A cart with three empty bays tells you something the scan alone does not, since the missing devices might be legitimately checked out to a teacher who took them to another room.

Cover take-home devices with attestation

You cannot scan a device that lives in a student's backpack, so verify it a different way: ask. An attestation campaign sends every person who holds an assigned device a short prompt — this is the device our records say you have, do you still have it — and tracks who has answered.

This works better than it sounds. The large majority respond, and the responses that say "no" or "I have a different one" are precisely the discrepancies you would never have found otherwise. The device that was quietly swapped at the help desk two years ago, the one handed to a sibling, the staff laptop that moved rooms with its user — all of these surface.

Send it during the school year, not in the last week. Attestation is only useful if there is time to resolve what it finds, and a campaign that closes in May leaves you the whole month of June to chase the exceptions.

Ask people to confirm the serial or asset tag rather than just clicking yes. A prompt that shows the number and asks them to check it against the sticker catches the mismatches; a prompt that just asks "do you have your Chromebook" gets a yes from everyone including the people who have the wrong one.

Follow up on non-responders through the building, not centrally. A list of twelve students per building handed to the building secretary gets resolved; a district-wide list of four hundred names sent to nobody in particular does not.

Resolving the discrepancy list

The value of the audit is entirely in what you do with the exceptions, and there are only a few real categories.

Record errors are the largest group and the easiest: the device is fine, the location or assignment in the system was stale. Fix the record, and note the pattern — if a whole class of records is wrong the same way, there is a process gap upstream that will regenerate the problem next year.

Misplaced devices are the second group: it exists, it is just somewhere else. Update the location and, if the pattern repeats between the same two buildings, ask why devices are moving without being recorded.

Genuinely missing devices are the group that needs a decision. Investigate each one — check the repair queue, check disposal records, ask the last known holder — and then either find it or formally write it off with a date, a reason, and an authorization. Marking a device as lost or stolen, with a police report where one exists, is a legitimate outcome; leaving it in an ambiguous state forever is not, and it corrupts every subsequent audit.

Devices found that are not in the system at all deserve attention. Untracked devices usually mean a receiving process was bypassed, often for a small grant purchase or a donation, and the fix is upstream at receiving rather than in the audit.

Publish the outcome. A dated report with the scope, the method, the counts in each category, and what was done about the exceptions is the artifact that satisfies auditors and the thing your successor will need.

How often, and how to make the next one easier

Federal property rules require a physical inventory reconciled to the records at least every two years for equipment purchased with federal funds. Many districts run a full sweep annually anyway, because the annual cadence keeps the records clean enough that each sweep is quick, while a biennial one lets two years of drift accumulate.

Spring is the usual window — after the year's device movement has settled and before collection, so that the outstanding list going into June is trustworthy. Some districts split it, sweeping storage and labs in the fall and running attestation in the spring.

The real way to make audits cheap is to reduce drift between them. Most drift comes from a handful of unrecorded events: help desk swaps, transfers between buildings, and receiving that bypassed the system. If each of those is a recorded transaction in the normal workflow, the audit finds almost nothing, which is the goal.

Continuous partial auditing is worth considering at larger districts. Rather than one enormous sweep, each building sweeps one location per week as a routine, so the entire fleet is covered over the year with no crunch. This also surfaces problems while they are still recent enough to solve.

Common questions

How often should a school district audit its device inventory?

At minimum every two years for equipment bought with federal funds, which is what 2 CFR 200 requires. Most districts run a full reconciliation annually because the shorter cycle keeps records clean enough that each pass is fast, whereas two years of drift makes every sweep painful.

How do you audit devices that students take home?

With an attestation campaign rather than a physical sweep. Prompt each holder to confirm the specific asset tag or serial the records claim they have, track who has responded, and hand non-responder lists to building staff. Ask them to check the number against the sticker, since a plain yes-or-no question gets a yes from people holding the wrong device.

What equipment do we need to run a device audit?

Phones. Modern scan tooling uses the phone camera to read barcodes and QR codes, so you can staff a building with several people without buying handheld scanners. What matters far more is that your asset tags are present and legible — poor labeling is what actually slows an audit down.

What do we do about devices we cannot find?

Investigate each one against the repair queue, disposal records, and the last known holder, then reach a documented conclusion. Formally writing a device off as lost or stolen with a date, reason, and authorization — plus a police report where applicable — is a legitimate outcome. Leaving devices in an ambiguous state corrupts every future audit.

What is the audit supposed to produce?

A dated report stating the scope, the method, how many devices were found as expected, found elsewhere, or missing, and what was done about each exception. Auditors rarely object to a district that lost some devices; they object to a district that cannot demonstrate it verified anything.

Why do our records drift between audits?

Almost always from three unrecorded events: help desk device swaps, transfers between buildings, and receiving that bypassed the system. Making each of those a routine recorded transaction is what turns the next audit into a formality instead of a project.

How Chalk approaches this

Chalk runs audits as scan-to-reconcile sweeps from a phone camera, comparing what was scanned against what was expected in that location and producing the found, misplaced, and missing lists directly. Attestation campaigns cover devices that are out with students, and lost or stolen outcomes are recorded with police-report capture so the write-off has a paper trail rather than disappearing from the record.

See the full feature catalog →

Run this playbook on your own fleet.

Chalk installs to a populated inventory from your SIS and Google Admin in about 30 minutes. Self-host free forever under AGPL-3.0, or let us host it — priced by fleet size, never per seat.