
“Unremediated Weaknesses” in FDIC Cybersecurity
The GAO found that the FDIC's information security control measures have improved in many ways, but that the agency continues to have "unremediated weaknesses." For example, it does not have an effective process for recertifying user access rights and has not applied critical patches to mitigate known vulnerabilities. [6/30/16]