Skip to Main Content
ICBA
ICBA
  • Member Login
  • Member Login

Audit finds CFPB s information security is not effective


The Consumer Financial Protection Bureau’s Office of the Inspector General released an audit that found the bureau’s information security program is no longer effective.

November 05, 2025 / By ICBA

The Consumer Financial Protection Bureau’s Office of the Inspector General released an audit that found the bureau’s information security program is no longer effective.

Details: The OIG’s report said the maturity level of the CFPB's information security program has decreased since last year, noting the bureau’s:

  • Authorizations to operate for many systems have not been maintained.

  • Risk acceptance memorandums lack documented analysis of cybersecurity risks.

  • Software is outdated.

Join ICBA Community

Interested in discussing this and other topics? Network with and learn from your peers with the app designed for community bankers. 

Join the community Example Text