FY 2022 Federal Information Security Modernization Act Review
… which is a rating scale for information security. We rated SBA’s overall program of information security as “not effective.” We found SBA generally responded to previously identified … incident response. However, the results of our tests show SBA continues to experience security control challenges in …