An IG audit found that the CFPB hasn’t maintained “an effective level of awareness of security vulnerabilities” following staff departures and diminished contractor support.