DBR’s Quality Control Program Did Not Detect a Documentation Deficiency in Its Oversight of the FHLBank System’s Information Security and Cybersecurity Risk Management

FHFA's DBR Deputy Director should reinforce, through training and other periodic reminders to supervisory examiners and QCB staff, the requirement that all worksteps supporting supervisory conclusions must be fully completed and all analyses thoroughly documented.