Board Report: 2023-IT-B-015 September 29, 2023
The Federal Information Security Modernization Act requires us to evaluate the Board's information security program each year.
The agency's program remains effective overall. And while the Board made enhancements in some areas, it can strengthen others, such as updating cybersecurity risk registers.
This report contains seven new recommendations and outlines recommendations that remain open from previous audits.
