OIG audit: CFPB information security program not effective, eight recommendations

A federal inspector general's 2026 FISMA audit concluded the CFPB's information security program is not effective and issued eight recommendations, a signal for vendors and regulated firms tracking bureau oversight expectations.