Board Report: 2026-IT-B-019 November 10, 2026
A breach or compromise of Board information systems could expose financial institutions’ confidential information, impair banking oversight, or disrupt technical work related to currency.
We found security control weaknesses that may affect the Board’s ability to identify and respond to unauthorized changes to (1) a system that tracks security items related to currency and (2) a system that contains personally identifiable information of certain job candidates. We noted additional concerns with these systems as well as the third system we tested, which stores confidential information related to the supervision of financial institutions.
We have two recommendations to strengthen the Board’s security controls. The Board agreed with our recommendations.