Email Record: CSB's information security program is not consistently implemented