Audit Finds SBA’s Information Security Program “Not Effective” Despite Cyber Improvements

An inspector general audit finds that the Small Business Administration’s information security program remains “not effective.” Of the eight areas evaluated, it only achieved a “managed and measurable” level — denoting effective security — in incident response.