The Consumer Financial Protection Bureau’s Office of the Inspector General released an audit that found the bureau’s information security program is no longer effective.
Details: The OIG’s report said the maturity level of the CFPB's information security program has decreased since last year, noting the bureau’s:
Authorizations to operate for many systems have not been maintained.
Risk acceptance memorandums lack documented analysis of cybersecurity risks.
Software is outdated.
