Federal Independent Agencies
Here's a look at documents from federal independent agencies
Featured Stories
Smithsonian Institution Asian Pacific American Center: Filipino American Stories on Migration and Memory Opens in December
WASHINGTON, Nov. 25 -- The Smithsonian Institution Asian Pacific American Center issued the following news release on Nov. 24, 2025:
* * *
Filipino American Stories on Migration and Memory Opens in December
First Smithsonian Asian Pacific American Center Exhibition at the National Museum of American History Explores Stockton's Little Manila
*
The Smithsonian Asian Pacific American Center (APAC) will open its next exhibition, "How Can You Forget Me: Filipino American Stories," Dec. 23 at the Nicholas F. and Eugenia Taubman Gallery in the Smithsonian's National Museum of American History. This
... Show Full Article
WASHINGTON, Nov. 25 -- The Smithsonian Institution Asian Pacific American Center issued the following news release on Nov. 24, 2025:
* * *
Filipino American Stories on Migration and Memory Opens in December
First Smithsonian Asian Pacific American Center Exhibition at the National Museum of American History Explores Stockton's Little Manila
*
The Smithsonian Asian Pacific American Center (APAC) will open its next exhibition, "How Can You Forget Me: Filipino American Stories," Dec. 23 at the Nicholas F. and Eugenia Taubman Gallery in the Smithsonian's National Museum of American History. Thismarks APAC's first exhibition at the museum and is its signature program for the Smithsonian's celebration of the nation's semiquincentennial, "Our Shared Future: 250." The exhibition explores the history of Filipino American migration, labor and community-building in Stockton, California--once home to the largest Filipino community outside the Philippines--from the 1910s to the 1970s.
"How Can You Forget Me" is anchored by more than 50 artifacts recovered from a trove of steamer trunks discovered in 2005 in the basement of the Daguhoy fraternal lodge in Stockton's Little Manila district. The exhibition features three of these trunks as both literal containers and symbolic vessels, revealing valuable insights into how Filipino migrants lived, worked, loved and built community. One of the three trunks was donated to the museum in 2022 by the Stockton-based nonprofit Little Manila Rising, which works to preserve the city's Filipino American heritage and legacy.
Each trunk serves as a time capsule, offering a distinct story and inviting visitors to unpack the intimate and collective experiences that shaped the journey of Filipino Americans in Stockton. From three-piece suits and ceremonial regalia to agricultural tools, family photographs, diaries and everyday objects, these belongings--long stored and forgotten--shed light on the lives of manongs, who forged deep bonds within their communities. The term manong--meaning "older brother" in Ilocano, a Filipino language--is used affectionately to describe these early Filipino labor migrants, many of whom were single men.
The exhibition's title, "How Can You Forget Me," is drawn from an embroidered pillowcase found in the trunk donated to the Smithsonian. The phrase expresses both personal longing and broader themes of memory and remembrance--sentiments that echo throughout the exhibition. A dedicated interactive section of the gallery offers visitors a chance to reflect on the objects and stories and to explore how early Filipino migrants navigated identity and belonging across the Filipino diaspora.
"These steamer trunks do not just tell the story of one Filipino American community in California," said Sam Vong, the exhibition's curator. "They tell an American story of immigrants fighting to preserve their history, of families struggling not to forget and not to be forgotten. That's why these stories are so powerful: they're about everyday people and about experiences we have all shared."
Vong, a curator of Asian Pacific American history at the National Museum of American History, was supported by curatorial assistant Ethan P. Johanson. The Smithsonian's Museum Conservation Institute contributed staff expertise and provided storage and conservation services for loaned objects. The exhibition is designed by the award-winning firm TSKP x IKD and will be on view for two years. A companion website featuring educational materials and a virtual gallery will launch alongside the exhibition.
The exhibition's first public program--a screening of the documentary Delano Manongs: Forgotten Heroes of the United Farm Workers--is scheduled for Friday, Jan. 16, 2026, from 7 to 9:30 p.m. in the museum's Warner Bros. Theater. Co-presented by APAC and the museum's History Film Forum, the event will include a post-screening discussion with director Marissa Aroy, Dillon Delvo of Little Manila Rising and others. Additional public and educational programs--including panels, workshops and film screenings--will be offered throughout the exhibition's run.
"How Can You Forget Me" invites in-person and virtual visitors to engage with a deeply place-based history of Filipino America--and by extension, of the United States--leading up to and throughout the nation's 250th anniversary.
"As we approach the nation's semiquincentennial, the exhibition deepens our understanding of the American experience by highlighting stories of resilience, resourcefulness and community," said Yao-Fen You, APAC's acting director.
"How Can You Forget Me" is supported by grants from the Henry Luce Foundation, the Surdna Foundation and the Coby Foundation. The exhibition has also received federal funding from the Asian Pacific American Initiatives Pool, administered by APAC, and the Latino Initiatives Pool, administered by the National Museum of the American Latino.
* * *
About the Smithsonian Asian Pacific American Center (APAC)
APAC, established in 1997, ensures the comprehensive representation and inclusion of Asian Americans, Native Hawaiians and Pacific Islanders across the Smithsonian's collections, research, exhibitions and programs. Through education initiatives, publications and public programs, APAC provides new avenues to document, celebrate and share the rich and diverse history, art and culture of Asian American, Native Hawaiian and Pacific Islander communities. APAC's exhibitions, "How Can You Forget Me" and "Sightlines: Chinatown and Beyond" (on view at the Smithsonian American Art Museum through Nov. 30, 2025) will pave the way for a dedicated APAC gallery on the National Mall.
* * *
Original text here: https://www.si.edu/newsdesk/releases/filipino-american-stories-migration-and-memory-opens-december
Paraguay to Expand High-Voltage Transmission System With IDB Support
WASHINGTON, Nov. 25 -- The Inter-American Development Bank issued the following news release:
* * *
Paraguay to Expand High-Voltage Transmission System with IDB Support
The Inter-American Development Bank (IDB) Board of Executive Directors has approved a $70 million loan under the Specific Investment Loan (ESP) modality to support the expansion of Paraguay's high-voltage transmission system and strengthen the institutional capacity of the National Electricity Administration (ANDE).
This operation is the third stage of a $400 million Conditional Credit Line for Investment Projects (CCLIP), approved
... Show Full Article
WASHINGTON, Nov. 25 -- The Inter-American Development Bank issued the following news release:
* * *
Paraguay to Expand High-Voltage Transmission System with IDB Support
The Inter-American Development Bank (IDB) Board of Executive Directors has approved a $70 million loan under the Specific Investment Loan (ESP) modality to support the expansion of Paraguay's high-voltage transmission system and strengthen the institutional capacity of the National Electricity Administration (ANDE).
This operation is the third stage of a $400 million Conditional Credit Line for Investment Projects (CCLIP), approvedin May 2020 to finance the country's Sustainable Energy Investment Program.
The project aims to increase the reliability and maximum transmission capacity of the National Interconnected System (SIN), as well as improve the efficiency and operational flexibility of the transmission network in the Metropolitan Area of Asuncion (AMA). It also includes strengthening ANDE's commercial management through the modernization of its IT system.
Overall, the project will benefit 1.8 million customers of the SIN nationwide, improving service quality and customer care. More specifically, it will directly impact 1.2 million users in the AMA, ensuring a more reliable, flexible, and efficient electricity supply.
The project will support the acquisition of land and easement rights for transmission lines, the construction of the Emboscada substation in the metropolitan area, the reconfiguration of two existing 500kV transmission lines, and the interconnection of the new substation with the 220kV network through the construction of two 220kV transmission lines.
Additionally, it will promote the implementation of a modern, integrated IT system to optimize ANDE's commercial management, along with institutional strengthening activities that include technical and operational training and strategic planning.
The $70 million loan has a repayment term of 24.5 years, a grace period of 6 years, an interest rate based on SOFR, and a local counterpart contribution of $16.4 million.
The operation is complemented by co-financing of $70 million from the European Investment Bank (EIB) and a non-reimbursable contribution of $11.5 million from the European Union's Latin America and Caribbean Investment Facility (LACIF).
* * *
About the IDB
The Inter-American Development Bank (IDB), a member of the IDB Group, is devoted to improving lives across Latin America and the Caribbean. Founded in 1959, the Bank works with the region's public sector to design and enable impactful, innovative solutions for sustainable and inclusive development. Leveraging financing, technical expertise, and knowledge, it promotes growth and well-being in 26 countries. Visit our website: https://www.iadb.org/en.
* * *
Original text here: https://www.iadb.org/en/news/paraguay-expand-high-voltage-transmission-system-idb-support
Asian Elephant Is Pregnant at the Smithsonian's National Zoo and Conservation Biology Institute
WASHINGTON, Nov. 25 -- The Smithsonian Institution National Zoo and Conservation Biology Institute issued the following news release:
* * *
Asian Elephant Is Pregnant at the Smithsonian's National Zoo and Conservation Biology Institute
$23 Million Campaign Launches To Increase Asian Elephant Conservation Impact
*
For the first time in nearly 25 years, animal care staff at the Smithsonian's National Zoo and Conservation Biology Institute (NZCBI) in Washington, D.C., are preparing for the highly anticipated birth of an Asian elephant calf. In April 2024, the Zoo's 44-year-old male elephant Spike
... Show Full Article
WASHINGTON, Nov. 25 -- The Smithsonian Institution National Zoo and Conservation Biology Institute issued the following news release:
* * *
Asian Elephant Is Pregnant at the Smithsonian's National Zoo and Conservation Biology Institute
$23 Million Campaign Launches To Increase Asian Elephant Conservation Impact
*
For the first time in nearly 25 years, animal care staff at the Smithsonian's National Zoo and Conservation Biology Institute (NZCBI) in Washington, D.C., are preparing for the highly anticipated birth of an Asian elephant calf. In April 2024, the Zoo's 44-year-old male elephant Spikebred with 12-year-old female Nhi Linh [NEE-lin]. Asian elephant pregnancies last 18 to 22 months on average. Staff are closely monitoring Nhi Linh and are cautiously optimistic she will deliver a healthy calf between mid-January and early March next year. Every birth is a boon for this endangered species, as fewer than 50,000 Asian elephants are left in the world.
"This calf represents real hope for the future of Asian elephants," said Brandie Smith, John and Adrienne Mars Director of NZCBI. "The first step to saving any species is getting people to care. As animal ambassadors, elephant calves are as charming and charismatic as they come. I can't wait for visitors to experience the joy of watching our multigenerational herd socialize, play and learn--reminding us how much we share with these gentle, intelligent animals."
As Nhi Linh's due date approaches, the Zoo will provide updates through its website, e-newsletter, Facebook, X and Instagram channels. At the Elephant Trails exhibit, visitors can see the Zoo's herd up close and meet their care team during the 3 p.m. daily keeper talk. Worldwide, fans can follow the elephants' stories and stay connected via the Elephant Cam on the Zoo's website.
In 2022, Spike and Nhi Linh received a breeding recommendation from the Association of Zoos and Aquariums' Species Survival Plan (SSP). SSP scientists track the lineage of individual animals in a record called a "studbook." When considering which animals to breed, a studbook keeper examines the individuals' genetic relatedness to one another, overall health and temperament, among other factors, and makes recommendations accordingly. This matchmaking process helps ensure the genetic diversity of a population in human care.
Spike arrived at NZCBI in spring 2018 from Busch Gardens Tampa Bay in Tampa, Florida, and is on loan from Zoo Miami in Florida. NZCBI welcomed Nhi Linh and her mother, Trong Nhi, in fall 2022 as a gift from the Rotterdam Zoo in South Holland, Netherlands. This calf will be the first offspring for Nhi Linh. Although Spike sired three calves at other zoos, none survived. Because Nhi Linh and Spike's genes are not well represented in zoos, their calf will help strengthen the genetic diversity of the Asian elephant population in North America and around the world.
Keepers describe Nhi Linh's personality as feisty and rambunctious. She is very inquisitive and brave when trying or exploring new things. Keepers say she is smitten with Spike, who exudes a laid-back, "gentlemanly" attitude. Asian elephants are known for being extremely smart, sensitive and social. The elephant care team is most excited to see how the calf will bond with its mother, staff and Spike, as well as their other herd mates--grandmother Trong Nhi (22), Bozie (51), Swarna (51) and Maharani (35).
Over the past three years, the elephant team has built positive relationships with Nhi Linh. Keepers train the elephants using positive reinforcement, a type of operant conditioning where they pair desired behaviors with rewards in the form of attention and food. Nhi Linh voluntarily participates in her own husbandry and medical training, including blood draws. A few months after Nhi Linh bred with Spike, staff used blood samples to confirm she had successfully conceived. These diagnostics are also used to track the elephants' hormones. Once her progesterone levels reach baseline, the team will know birth is imminent. Nhi Linh also voluntarily participates in ultrasounds, allowing staff to monitor fetal development, heartbeat and movement. To help her maintain optimal body condition, staff take Nhi Linh through strength and flexibility exercises daily. Some of the behaviors she has learned--such as extending her legs forward on cue--will be utilized if the calf needs better access to nurse.
Although staff provide the highest level of prenatal care, just as with any animal pregnancy there is a possibility that miscarriage, stillbirth or a complication could occur. Trong Nhi--Nhi Linh's mother--bred with Spike in April 2024, and staff confirmed she, too, had conceived. Unfortunately, on Oct. 30, Trong Nhi displayed intense discomfort in line with pre-term labor or gastrointestinal colic. While this behavior can sometimes occur in normal late-stage pregnancies as the fetus shifts, this episode prompted additional hormone testing and ultrasound evaluations of the fetus and her reproductive tract. Trong Nhi's blood sample showed a significant and sustained drop in her progesterone and prolactin hormones--an indicator her fetus may no longer be viable. Animal care staff continue to provide supportive care and comfort to Trong Nhi, who remains stable and is behaving and socializing normally with her herd, keepers and veterinarians. Nhi Linh's pregnancy is on track, and staff are cautiously optimistic she will welcome her first calf in the coming months.
"Breeding Asian elephants in human care is worthwhile for many reasons, not the least of which is this species is critically endangered," said Robbie Clark, elephant manager and acting curator of Elephant Trails. "Our team has been working tirelessly to set Trong Nhi and Nhi Linh up for success, and we were hopeful that both would have healthy calves. While that is not likely in the cards for Trong Nhi, we are excited to see how she steps into her new role as grandmother. As Nhi Linh's birth window approaches, her health and well-being are top of mind, and we are prepared to offer support every step of the way--through labor, delivery and beyond."
Conservation Priorities
For more than 50 years, Smithsonian scientists at NZCBI have led research on elephant care and conservation in Washington, D.C., and Southeast Asia. The Zoo's elephants are a critical part of this work. These animal ambassadors participate in studies that help scientists better understand Asian elephant behavior, reproduction, endocrinology, disease (including elephant endotheliotropic herpesviruses, or EEHV), genetics and movement ecology. They share information with accredited institutions to advance elephant care in zoos. In elephant range countries, Smithsonian scientists conduct research alongside key conservation organizations, universities, government agencies and local community partners. Together, they develop strategies and solutions to help humans and elephants live safely side-by-side, from rewilding former work elephants to safeguarding lives and crops on lands that have been converted from forests to farms.
Fundraising Campaign
Ahead of the calf's birth, NZCBI is seeking $23 million in public and corporate donations to be used over the next five years. These funds will enable the Zoo to grow its Asian elephant conservation program, building on decades of research and leadership in movement ecology and rewilding, genetics and health, nutrition and wellness and facilities and technology. Federal funding covers essential animal care expenses such as food, medicine, animal care staff and facilities maintenance for all animals at NZCBI. Funds to cover the Smithsonian's ongoing conservation research that help Asian elephants--both here and in the wild--depend entirely on private support from donations, annual membership support and in-park revenue.
* * *
About the Smithsonian's National Zoo and Conservation Biology Institute
The Smithsonian's National Zoo and Conservation Biology Institute (NZCBI) leads the Smithsonian's global effort to save species, better understand ecosystems and train future generations of conservationists. Its two campuses are home to some of the world's most critically endangered species. Always free of charge, the Zoo's 163-acre park in the heart of Washington, D.C., features 2,200 animals representing 400 species and is a popular destination for children and families. At the Conservation Biology Institute's 3,200-acre campus in Virginia, breeding and veterinary research on 264 animals representing 20 species provide critical data for the management of animals in human care and valuable insights for conservation of wild populations. NZCBI's more than 300 staff and scientists work in Washington, D.C., Virginia and with partners at field sites across the United States and in more than 30 countries to save wildlife, collaborate with communities and conserve native habitats. NZCBI is a long-standing accredited member of the Association of Zoos and Aquariums.
* * *
Original text here: https://www.si.edu/newsdesk/releases/asian-elephant-pregnant-smithsonians-national-zoo-and-conservation-biology
SBA Offers Disaster Relief to Pennsylvania Small Businesses and Private Nonprofits Affected by Drought
WASHINGTON, Nov. 24 -- The Small Business Administration's Office of Disaster Assistance issued the following news release:
* * *
SBA Offers Disaster Relief to Pennsylvania Small Businesses and Private Nonprofits Affected by Drought
*
WASHINGTON - The U.S. Small Business Administration (SBA) announced the availability of low interest federal disaster loans to small businesses and private nonprofit (PNP) organizations in Pennsylvania who sustained economic losses caused by drought beginning Sept. 23, 2025.
The disaster declaration covers the counties of Fayette, Greene and Washington in Pennsylvania,
... Show Full Article
WASHINGTON, Nov. 24 -- The Small Business Administration's Office of Disaster Assistance issued the following news release:
* * *
SBA Offers Disaster Relief to Pennsylvania Small Businesses and Private Nonprofits Affected by Drought
*
WASHINGTON - The U.S. Small Business Administration (SBA) announced the availability of low interest federal disaster loans to small businesses and private nonprofit (PNP) organizations in Pennsylvania who sustained economic losses caused by drought beginning Sept. 23, 2025.
The disaster declaration covers the counties of Fayette, Greene and Washington in Pennsylvania,as well as Marshall, Monongalia and Wetzel counties in West Virginia.
Under this declaration, the SBA's Economic Injury Disaster Loan (EIDL) program is available to eligible small businesses, small agricultural cooperatives, nurseries, and PNPs with financial losses directly related to this disaster. The SBA is unable to provide disaster loans to agricultural producers, farmers, or ranchers, except for aquaculture enterprises.
EIDLs are available for working capital needs caused by the disaster and are available even if the small business or PNP did not suffer any physical damage. The loans may be used to pay fixed debts, payroll, accounts payable, and other bills not paid due to the disaster.
"Through a declaration by the U.S. Secretary of Agriculture, SBA provides critical financial assistance to help communities recover," said Chris Stallings, associate administrator of the Office of Disaster Recovery and Resilience at the SBA. "We're pleased to offer loans to small businesses and private nonprofits impacted by these disasters."
The loan amount can be up to $2 million with interest rates as low as 4% for small businesses and 3.625% for PNPs, with terms up to 30 years. Interest does not accrue, and payments are not due until 12 months from the date of the first loan disbursement. The SBA sets loan amounts and terms based on each applicant's financial condition.
To apply online visit sba.gov/disaster. Applicants may also call SBA's Customer Service Center at (800) 659-2955 or email disastercustomerservice@sba.gov for more information on SBA disaster assistance. For people who are deaf, hard of hearing, or have a speech disability, please dial 7-1-1 to access telecommunications relay services.
The deadline to return economic injury applications is June 1, 2026.
About the U.S. Small Business Administration
The U.S. Small Business Administration helps power the American dream of business ownership. As the only go-to resource and voice for small businesses backed by the strength of the federal government, the SBA empowers entrepreneurs and small business owners with the resources and support they need to start, grow, expand their businesses, or recover from a declared disaster. It delivers services through an extensive network of SBA field offices and partnerships with public and private organizations. To learn more, visit www.sba.gov.
***
Original text here: https://www.sba.gov/article/2025/11/24/sba-offers-disaster-relief-pennsylvania-small-businesses-private-nonprofits-affected-drought
Fed IG: 2025 Audit of the CFPB's Information Security Program
WASHINGTON, Nov. 23 (TNSLrpt) -- The Federal Reserve Inspector General issued the following report (No. 2025-IT-C-012) on Oct. 31, 2025, entitled "2025 Audit of the CFPB's Information Security Program."
Here are excerpts:
* * *
Executive Summary
Findings
The Consumer Financial Protection Bureau's overall information security program has decreased from a level-4 maturity (managed and measurable) to a level-2 maturity (defined) in fiscal year 2025. We further concluded, based on the results of our determinations of effectiveness in each domain and function, that the CFPB's overall information
... Show Full Article
WASHINGTON, Nov. 23 (TNSLrpt) -- The Federal Reserve Inspector General issued the following report (No. 2025-IT-C-012) on Oct. 31, 2025, entitled "2025 Audit of the CFPB's Information Security Program."
Here are excerpts:
* * *
Executive Summary
Findings
The Consumer Financial Protection Bureau's overall information security program has decreased from a level-4 maturity (managed and measurable) to a level-2 maturity (defined) in fiscal year 2025. We further concluded, based on the results of our determinations of effectiveness in each domain and function, that the CFPB's overall informationsecurity program is not effective. We found that the CFPB is not maintaining its authorizations to operate for many systems and is using risk acceptance memorandums without a documented analysis of cybersecurity risks. This issue has been compounded by the loss of contractor resources supporting information security continuous monitoring and testing activities and the departure of agency personnel. As such, the CFPB is unable to maintain an effective level of awareness of security vulnerabilities in its environment. We also found that the CFPB can strengthen its information security program by using cybersecurity profiles to assess, tailor, and prioritize its cybersecurity approach. Specifically, we believe that the use of profiles can help the agency align its cybersecurity program and control structure with the future state of the agency and the sensitive data it maintains.
We further found that, despite these resource and operating constraints, the CFPB was able to take some steps to maintain and strengthen its information security program. For example, the agency updated and formalized processes for responding to potential ransomware incidents and transitioned toward a continuous vetting model for employee background reinvestigations. Additionally, the senior agency information security officer continues to meet with system owners on a weekly basis to manage cybersecurity risks, and the agency is in the process of decommissioning and modernizing legacy technology systems.
Lastly, we continue to identify the use of outdated software on the CFPB's network for which vendors are no longer providing security updates and patches. A key reason for this issue is delays in modernizing, rearchitecting, and retiring legacy applications. We have previously raised this issue and have an open recommendation related to it. As such, we are not including a new recommendation and suggest that management prioritize efforts to reduce the risks resulting from the use of outdated software.
Recommendations
This report includes six new recommendations designed to strengthen the CFPB's information security program in the areas of cybersecurity profiles, security authorizations, and information security continuous monitoring. In response to a draft of our report, the CFPB concurs with our recommendations and notes that the recommendations will enhance the agency's information security program. The agency further outlines actions to address each recommendation. In addition, we are closing three recommendations from our prior years' Federal Information Security Modernization Act of 2014 (FISMA) audit reports. Eight previously made recommendations in the areas of data loss prevention, data classification, flaw remediation, and system/software inventorying remain open. We will continue to monitor the CFPB's progress in addressing our open recommendations as part of future FISMA audits.
Purpose
To meet our annual FISMA reporting responsibilities, we reviewed the information security program and practices of the CFPB. Our specific audit objectives, based on legislative requirements, were to evaluate the effectiveness of the CFPB's (1) security controls and techniques for selected information systems and (2) information security policies, procedures, standards, and guidelines.
Background
FISMA requires each inspector general to conduct an annual independent evaluation of their agency's information security program, practices, and controls for selected systems. The Office of Management and Budget's (OMB) FY 2025 Inspector General Federal Information Security Modernization Act of 2014 (FISMA) Reporting Metrics directs inspectors general to evaluate the maturity level (from a low of 1 to a high of 5) of their agency's information security program for fiscal year 2025. OMB notes that level 4 (managed and measurable) represents an effective level of security.
* * *
The report is posted at: https://oig.federalreserve.gov/reports/cfpb-information-security-program-oct2025.pdf
Fed IG: 2025 Audit of the CFPB's Information Security Program
WASHINGTON, Nov. 23 (TNSLrpt) -- The Federal Reserve Inspector General issued the following report (No. 2025-IT-C-012) on Oct. 31, 2025, entitled "2025 Audit of the CFPB's Information Security Program."
Here are excerpts:
* * *
Executive Summary
Findings
The Consumer Financial Protection Bureau's overall information security program has decreased from a level-4 maturity (managed and measurable) to a level-2 maturity (defined) in fiscal year 2025. We further concluded, based on the results of our determinations of effectiveness in each domain and function, that the CFPB's overall information
... Show Full Article
WASHINGTON, Nov. 23 (TNSLrpt) -- The Federal Reserve Inspector General issued the following report (No. 2025-IT-C-012) on Oct. 31, 2025, entitled "2025 Audit of the CFPB's Information Security Program."
Here are excerpts:
* * *
Executive Summary
Findings
The Consumer Financial Protection Bureau's overall information security program has decreased from a level-4 maturity (managed and measurable) to a level-2 maturity (defined) in fiscal year 2025. We further concluded, based on the results of our determinations of effectiveness in each domain and function, that the CFPB's overall informationsecurity program is not effective. We found that the CFPB is not maintaining its authorizations to operate for many systems and is using risk acceptance memorandums without a documented analysis of cybersecurity risks. This issue has been compounded by the loss of contractor resources supporting information security continuous monitoring and testing activities and the departure of agency personnel. As such, the CFPB is unable to maintain an effective level of awareness of security vulnerabilities in its environment. We also found that the CFPB can strengthen its information security program by using cybersecurity profiles to assess, tailor, and prioritize its cybersecurity approach. Specifically, we believe that the use of profiles can help the agency align its cybersecurity program and control structure with the future state of the agency and the sensitive data it maintains.
We further found that, despite these resource and operating constraints, the CFPB was able to take some steps to maintain and strengthen its information security program. For example, the agency updated and formalized processes for responding to potential ransomware incidents and transitioned toward a continuous vetting model for employee background reinvestigations. Additionally, the senior agency information security officer continues to meet with system owners on a weekly basis to manage cybersecurity risks, and the agency is in the process of decommissioning and modernizing legacy technology systems.
Lastly, we continue to identify the use of outdated software on the CFPB's network for which vendors are no longer providing security updates and patches. A key reason for this issue is delays in modernizing, rearchitecting, and retiring legacy applications. We have previously raised this issue and have an open recommendation related to it. As such, we are not including a new recommendation and suggest that management prioritize efforts to reduce the risks resulting from the use of outdated software.
Recommendations
This report includes six new recommendations designed to strengthen the CFPB's information security program in the areas of cybersecurity profiles, security authorizations, and information security continuous monitoring. In response to a draft of our report, the CFPB concurs with our recommendations and notes that the recommendations will enhance the agency's information security program. The agency further outlines actions to address each recommendation. In addition, we are closing three recommendations from our prior years' Federal Information Security Modernization Act of 2014 (FISMA) audit reports. Eight previously made recommendations in the areas of data loss prevention, data classification, flaw remediation, and system/software inventorying remain open. We will continue to monitor the CFPB's progress in addressing our open recommendations as part of future FISMA audits.
Purpose
To meet our annual FISMA reporting responsibilities, we reviewed the information security program and practices of the CFPB. Our specific audit objectives, based on legislative requirements, were to evaluate the effectiveness of the CFPB's (1) security controls and techniques for selected information systems and (2) information security policies, procedures, standards, and guidelines.
Background
FISMA requires each inspector general to conduct an annual independent evaluation of their agency's information security program, practices, and controls for selected systems. The Office of Management and Budget's (OMB) FY 2025 Inspector General Federal Information Security Modernization Act of 2014 (FISMA) Reporting Metrics directs inspectors general to evaluate the maturity level (from a low of 1 to a high of 5) of their agency's information security program for fiscal year 2025. OMB notes that level 4 (managed and measurable) represents an effective level of security.
* * *
The report is posted at: https://oig.federalreserve.gov/reports/cfpb-information-security-program-oct2025.pdf
EPA IG: Audit of Compliance With the Clean Water & Drinking Water State Revolving Fund Financial Statement Audit Requirements
WASHINGTON, Nov. 23 (TNSLrpt) -- The Environmental Protection Agency Inspector General issued the following report (No. 26-P-0001) on Oct. 15,2025, entitled "Audit of Compliance with the Clean Water and Drinking Water State Revolving Fund Financial Statement Audit Requirements."
Here are excerpts:
* * *
Audit of Compliance with the Clean Water and Drinking Water State Revolving Fund Financial Statement Audit Requirements
Why We Did This Audit
To accomplish this objective:
The U.S. Environmental Protection Agency Office of Inspector General conducted this audit to determine whether the states
... Show Full Article
WASHINGTON, Nov. 23 (TNSLrpt) -- The Environmental Protection Agency Inspector General issued the following report (No. 26-P-0001) on Oct. 15,2025, entitled "Audit of Compliance with the Clean Water and Drinking Water State Revolving Fund Financial Statement Audit Requirements."
Here are excerpts:
* * *
Audit of Compliance with the Clean Water and Drinking Water State Revolving Fund Financial Statement Audit Requirements
Why We Did This Audit
To accomplish this objective:
The U.S. Environmental Protection Agency Office of Inspector General conducted this audit to determine whether the statesand the Commonwealth of Puerto Rico had an annual audit of their Clean Water State Revolving Fund and Drinking Water State Revolving Fund financial statements for fiscal year 2022 in accordance with requirements.
The 1987 amendments to the Clean Water Act created the Clean Water State Revolving Fund Program that provides financial assistance for clean water infrastructure projects. The 1996 amendments to the Safe Drinking Water Act established the Drinking Water State Revolving Fund Program that helps finance drinking water infrastructure projects.
To support these EPA mission-related efforts:
* Ensuring clean and safe water.
* Partnering with states and other stakeholders.
What We Found
The majority of states and the Commonwealth of Puerto Rico, respectively, had an annual audit of their Clean Water State Revolving Fund and Drinking Water State Revolving Fund financial statements for fiscal year 2022 prepared in accordance with requirements.
Specifically, in fiscal year 2022, 43 out of 51 state CWSRF programs and 42 out of 51 state DWSRF programs had an independently conducted financial audit that identified the financial information for each program as separate financial statements, separate components in the basic financial statements section of a financial report, or separate components in the financial statement's supplementary information section. The remaining states provided other documentation for their FY 2022 CWSRF and DWSRF programs that did not specifically include audited financial statements. This occurred because Office of Water guidance is not consistent with the Clean Water Act and the Safe Drinking Water Act statutory requirements. The EPA awarded over $490 million in total funding in FY 2022 to the states that provided other documentation.
The Clean Water Act and the Safe Drinking Water Act require periodic independent audits of the state revolving fund programs in compliance with the U.S. Government Accountability Office's Government Auditing Standards. Such audits require an auditor's opinion on each program's financial statements; a report on internal controls; and a report on compliance with law, regulations, and general grant requirements. According to the EPA, obtaining annual audited financial statements from a state's programs is one of the best methods to support the Agency's oversight role.
We make no recommendations in this report.
* * *
MEMORANDUM
SUBJECT: Audit of Compliance with the Clean Water and Drinking Water State Revolving Fund Financial Statement Audit Requirements Report No. 26-P-0001
FROM: Nicole N. Murley, Acting Inspector General
TO: Peggy S. Browne, Assistant Administrator Office of Water
This is our report on the subject audit conducted by the U.S. Environmental Protection Agency Office of Inspector General. The project number for this audit was OA-FY23-0097. This report contains findings that describe the problems the OIG has identified.
The Office of Water is responsible for the issues discussed in this report.
A response to this report is not required because the report contains no recommendations. If your office submits a response, however, it will be posted on the OIG's website, along with our memorandum commenting on the response. The response should be provided as an Adobe PDF file that complies with the requirements of section 508 of the Rehabilitation Act of 1973, as amended. The final response should not contain data that your office does not want released to the public; if the response contains such data, your office should identify the data for redaction or removal along with corresponding justification.
We will post this report to our website at www.epa.gov/oig.
* * *
The report is posted at: https://www.epa.gov/system/files/documents/2025-10/_epaoig_20251015-26-p-0001_cert.pdf
