Federal Reserve Fails to Effectively Manage Insider Risks
The Federal Reserve Board of Governors Office of the Inspector General conducted an investigation into insider risk management at the Federal Reserve. They found that despite having seemingly comprehensive coverage, there were still significant gaps in identifying and managing insider risks.
The report defines insider risk as any individual, including employees, contractors, or external entities with access to critical assets, who may use this access to harm the organization either intentionally or accidentally.
Critical assets at the Federal Reserve include sensitive economic research, interest rate decision-making information, payment systems, and technological infrastructure. The report found that the board's current approach to insider risk management is decentralized and relies on individual bureaus and offices to manage their own security programs.
The investigators recommended consolidating these programs into a centralized hub with standardized procedures and processes. This would allow for better information sharing and coordination across the organization, as well as improved incident response and protection of due process rights.