Status: Closed - Implemented Comments: In response to our recommendation, the Bureau established risk registers for the major IT systems, including risks related to mobile computing devices and system interfaces, which include mitigation plan steps and a schedule for completing the necessary mitigation actions.