A department in the government agency had purchased a logistics app which would allow employees to use iOS devices to scan barcodes on assets across the government agency and validate those against a central asset database. The app accessed information that the government agency deemed sensitive.