Construction work continues at the Marriner S. Eccles Federal Reserve building in Washington, D.C., on Dec. 30, 2025. (Photo by Brendan SMIALOWSKI / AFP via Getty Images)
The OIG attributed the Federal Reserve’s ineffective information security program to a decentralized IT operation, unaddressed recommendations and changes to FISMA methodology.
The exterior of the Consumer Financial Protection Bureau headquarters is seen on Feb. 10, 2025 in Washington, D.C. (Photo by Anna Moneymaker/Getty Images)
The agency hasn’t consistently implemented cyber measures under FISMA, per the watchdog. CFPB’s CIO said the report lacks context and doesn’t account for “significant improvements.”
Demonstrators raise signs and posters outside Consumer Financial Protection Bureau headquarters on Feb. 10, 2025 in Washington, D.C. (Photo by Jemal Countess/Getty Images for MoveOn)
The watchdog said the consumer agency would have had “no way of knowing” whether the data stored in that hardware was secured. The CFPB’s CIO pushed back.
