CFPB Report: 2020-IT-C-017R July 22, 2020
As part of our 2019 audit of the Bureau's information security program, we tested technical controls for the agency's Legal Enclave, which includes systems and processes that are used to collect, store, process, and transmit critical information related to investigations and litigation.
We found several security vulnerabilities in the Legal Enclave. Although the Bureau was aware of several of these issues, it had not taken timely action to mitigate their risks. We are making recommendations to help strengthen the agency's technical security controls.
Given the sensitivity of our review, this memorandum is restricted.
