OIG again deems HHS’ infosec program ineffective
Healthcare IT News November 20, 2024
In its FISMA review for FY 2024, the watchdog agency said that the U.S. Health and Human Services was unable to meet managed and measurable maturity for core metrics.
Similar to its findings last year, the Office of Inspector General said Tuesday that the U.S. Health and Human Services continued to have difficulty in identifying, detecting, responding to and recovering from threats to information security.
WHY IT MATTERS
In its annual audit required by the Federal Information Security Modernization Act of 2014, OIG said it reviewed HHS programs and practices against its core and supplemental metrics.
Through the effort, it found that HHS was “not effective” in meeting maturity for all five function areas under the NIST framework...