People walk past the headquarters of the Small Business Administration in the Southwest Federal Center area on March 24, 2025 in Washington, D.C. (Photo by Chip Somodevilla/Getty Images)
The OIG told the agency that noncompliance with MFA on personal devices and the accessing of networks from foreign locations presented IT security risks.