Health IT Security March 2, 2020
An OIG audit around NIH’s EHR security found that while it had some established controls, the agency’s security practices and policies may have increased the potential risk to its EHR data.
The security policies and practices around the electronic health system of the National Institutes of Health may have potentially put the security, confidentiality, integrity, and availability of its data at risk, according to a Department of Health and Human Services’ Office of Inspector General audit.
OIG performed an audit of NIH, as it received $5 million in congressional appropriations for fiscal year 2019 to conduct oversight of the NIH grant programs and operations. Cybersecurity protections and NIH compliance with federal requirements was a key area of interest.
Notably, Sen....