Skip to Primary Navigation

Skip to main content

Fed OIG downgrades CFPB cybersecurity assessment to second-lowest level

CFPB headquarters
Photo: Philip Yabut/Getty Images

Alexander Barzacanos

2 min read
 Click to share on Facebook (Opens in new window/tab) Click to share on Twitter (Opens in new window/tab) Click to share on LinkedIn (Opens in new window/tab) Click to share on WhatsApp (Opens in new window/tab)

Failure to maintain ATOs and lack of documentation key factors in decision.

The information security program of the Consumer Financial Protection Bureau (CFPB) is “not effective” and its maturity level has been downgraded to Level 2 (Defined). The move has been made by the Federal Reserve Board Office of Inspector General (OIG), which released its 2025 Federal Information Security Modernization Act (FISMA) audit

Level

, , , , , , , ,