CFPB Report: 2020-IT-C-007R March 23, 2020
We tested the data exfiltration controls and related technologies used by the Bureau. We completed this testing as part of our 2019 audit of the Bureau's information security program.
Our testing found that the Bureau could improve its data exfiltration controls throughout its environment. This memorandum provides the details of our testing results to facilitate the Bureau's ongoing actions to address our recommendation from our 2019 audit to strengthen controls in this area.
Given the sensitivity of our review, this memorandum is restricted.