The U.S. Department of Health and Human Services’ Office of the Inspector General found the information security programs of four agencies were “not effective,” HealthITSecurity reports. The OIG reviewed the programs of HHS, the U.S. Food and Drug Administration, Centers for Medicare and Medicaid Services, and National Institutes of Health. In its annual Federal Information Security Management Act audit, the OIG writes the four entities have worked to improve their security programs; however, the organizations still needed to improve in areas related to data protection and privacy, incident response, risk management and identity, and access management.
Full Story