The OIG told the agency that noncompliance with MFA on personal devices and the accessing of networks from foreign locations presented IT security risks.

The Department of Agriculture, the National Science Foundation and the Small Business Administration are the only CFO Act agencies that met OMB’s August 2023 timeline for the…