The Federal Information Security Modernization Act of 2014 requires us to perform an annual independent evaluation of the CFPB's information security program.

The CFPB's information security program continues to operate effectively, and the agency has strengthened the program since our review last year. Nonetheless, the CFPB can enhance its program in the areas of data loss prevention, software asset management, and continuity planning

... Read full text