IG Audits Expose SEC’s Lack of controls on sensitive or nonpublic information. SEC employees and contractors not restricted from saving and uploading sensitive information on non-SEC computers. SEC Inspector General Carl Hoecker: “Consequently, sensitive information could potentially be disclosed to unauthorized persons” IG also takes the SEC to task for weaknesses in its certification and accreditation process. SEC leaders say they have taken steps to fix the problems raised by the IG’s auditors, accepted IG recommendations.”]
Source: https://www.cuinfosecurity.com/ig-audits-expose-secs-lack-controls-a-5657