GAO: FDIC Needs Stronger Security Controls
...GAO said
For example, multiple FDIC users shared the same login ID and password, had unrestricted access to application source code and used a password that was not adequately encrypted. The FDIC also did not fully test configuration controls, GAO reported
Until the FDIC fully performs key information security program activities, GAO said...
