Fox reports that a recently discovered government report revealed the Securities and Exchange Commission’s deficiency in “effective” cybersecurity initiatives just prior to the X hack.

In a letter addressed to the Office of Inspector General in December 2023, David Bottom, the Chief Information Officer of the Securities and Exchange Commission (SEC), expressed his satisfaction with the report’s findings on enhancements to the SEC’s information security program in various areas. These domains include risk management, supply chain, security training, and continuous diagnostics and monitoring. Bottom acknowledged the ongoing efforts of the SEC’s Office of Information Technology (OIT) to enhance the program’s overall effectiveness, despite the fact that not all metrics are assessed and rated annually.