CFPB inspector general: Consumer complaint database needs better identity management

FedScoop: The Consumer Financial Protection Bureau should strengthen the identity and access management controls in place around its public-facing consumer complaint database, the agency’s inspector general says.

In a security review of the system, called Mosaic, the IG found that the security procedure is, for the most part, effective. “However,” the IG writes in a summary of the report, “we found that the Bureau can strengthen controls in the area of identity and access management to ensure that the security control environment for Mosaic remains effective.” Identity management, simply, is a way to ensure that system users are who they say they are.

Read article