Text this: FHFA's offboarding controls over access cards, sensitive IT assets, and records were not always documented or followed during 2016 and 2017.