Weaknesses Identified During the FY 2020 Federal Information Security Modernization Act Review
… Management Act to assess SBA’s information security program every year. In FY 2020, SBA had an unprecedented … on a maturity model spectrum. We rated SBA’s overall program of information security as ”not effective” because … — Defined Configuration Management—Defined Identity and Access Management — Consistently Implemented Data Protection …