Board Report: 2018-IT-B-006R March 7, 2018
The Risk Assessment, Data Analysis, and Research (RADAR) Data Warehouse gives Federal Reserve System and Board staff access to mortgage and consumer data for supervision and research purposes. We evaluated the effectiveness of select information security controls for the RADAR Data Warehouse and associated query tools.
The information security controls that we tested were operating effectively. However, we identified opportunities to strengthen certain controls in the areas of contingency planning, configuration management, and security assessment and authorization. As a result, we are making recommendations to strengthen the security of the RADAR Data Warehouse in these areas.
Given the sensitivity of information security review work, our reports in this area are generally restricted. Such is the case for this audit report.
