Stay Informed
of New Reports
Twitter
Where To Report Waste
Fraud, Abuse, Or Retaliation
Where To Report Waste Fraud, Abuse, Or Retaliation

FHFA Did Not Fully Implement Select Security Controls Over One of Its Cloud Systems as Required by NIST and FHFA Standards and Guidelines

Related Open Recommendations

Recommendation Number Recommendation Status Significant Recommendation Additional Details
AUD-2023-002-2 Open No FHFA Did Not Fully Implement Select Security Controls Over One of Its Cloud Systems as Required by NIST and FHFA Standards an
FHFA should develop and maintain a complete and accurate cloud system component inventory, as required by NIST SP 800-53.
AUD-2023-002-5 Open No FHFA Did Not Fully Implement Select Security Controls Over One of Its Cloud Systems as Required by NIST and FHFA Standards an
FHFA should develop and implement a solution to encrypt all data-at-rest on the cloud system as required by National Institute of Standards and Technology SP 800-53.
Displaying 2 of 2 Recommendations