# Federal Reserve OIG Urges IT Control Reforms

The Federal Reserve Office of Inspector General rated the Board of Governors’ information security program 2 out of 5, down from 4 in fiscal 2024 and 3 in fiscal 2025. The OIG issued eight recommendations addressing decentralized IT operations, inconsistent policy enforcement, unresolved security issues, risk assessment of independently operated embedded IT, asset inventories, and multifactor authentication exceptions. The Board concurred. No solicitation, contract value, or procurement contact was announced, but the findings identify potential needs for cybersecurity assessment, governance, vulnerability management, and IT integration support.

- Contractors offering cybersecurity assessments or IT governance support may find relevant future work in addressing the OIG’s recommendations; no specific procurement opportunity has been announced.
- Firms with capabilities in asset inventory controls, multifactor authentication exception management, and integration of decentralized IT environments can align offerings with the issues identified.
- Procurement professionals should distinguish these audit findings from an active solicitation: the signal provides no contract scope, funding, or acquisition timeline.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** October 30, 2026

### Government Entities
- Board of Governors of the Federal Reserve System (Federal Reserve Board)
- Federal Reserve Office of Inspector General (Federal Reserve OIG)

### Sources
- [Fed watchdog pushes central bank toward more streamlined IT operations | FedScoop](https://fedscoop.com/federal-reserve-cybersecurity-watchdog-report) - FedScoop