Results of Security Control Testing of a Videoconferencing Platform Used by the CFPB

The CFPB uses a videoconferencing platform that enables real-time collaboration to connect employees and virtual teams.

Selected security controls tested for the videoconferencing platform are operating effectively. For example, the CFPB ensured that privileged accounts are provisioned, managed, and reviewed in accordance with the principles of least privilege and separation of duties. In addition, the CFPB performs quarterly security control assessments of the videoconferencing platform. Our report includes one item for management's consideration related to monitoring the videoconferencing platform's chat communications.

Given the sensitivity of this information, our full report is restricted.