CFPB Report: 2023-IT-C-016 September 29, 2023
The Federal Information Security Modernization Act requires us to evaluate the CFPB's information security program each year.
The agency's program remains effective overall. And while the CFPB made enhancements in some areas, it can strengthen others, such as contingency planning.
This report contains a new recommendation and outlines recommendations that remain open from previous audits.