Health IT Security April 9, 2021
Jessica Davis

The latest GAO audit of HHS’ information security program against FISMA standards found multiple flaws, including failure to implement continuous monitoring in select operating divisions.

An evaluation of the Department of Health and Human Services against Federal Information Security Modernization Act of 2014 (FISMA) principles found the agency’s information security program “not effective,” due to several maturity deficiencies, according to the Government Accountability Office.

Under FISMA, Inspectors General are required to perform an annual, independent review of agency information security programs and practices, to determine overall effectiveness. For the HHS audit, Ernst & Young conducted a review of HHS compliance as of September 30, 2020 against FISMA reporting metrics.

The auditors reviewed the program against applicable federal laws, regulations, and...

Today's Sponsors

LEK
ZeOmega

Today's Sponsor

LEK

 
Topics: Cybersecurity, GAO, Govt Agencies, Health IT, HHS, Survey / Study, Technology, Trends
Trump's Picks for Top Health Jobs Not Just Team of Rivals but 'Team of Opponents'
President-elect Trump taps HHS landing team leader: Politico
FHC #158: RFK Jr., obesity, the healthcare cost crisis and AI
Former HHS Secretary Tom Price’s vision for the second Trump administration
HHS releases information blocking rule related to care access

Share This Article