Health IT Security September 28, 2022
OIG audited NIH’s health grant program and found that it did not have adequate cybersecurity controls and risk assessment protocols in place to safeguard sensitive data.
In a recent audit, The HHS Office of Inspector General (OIG) found that the National Institutes of Health (NIH) had not implemented adequate requirements to ensure that its grant awards had risk-based cybersecurity protections in place to protect sensitive data.
“National Institutes of Health (NIH) invests more than $30 billion annually in medical research for the American people. More than 80 percent of NIH’s funding is awarded through almost 50,000 competitive grants to various research institutions in all 50 states and around the world,” the report stated.
“Thus, the data safeguards and security...