The Federal Information Security Management Act requires federal agencies to implement certain procedures and policies to detect and respond to security incidents. With its audit, the OIG will determine whether HHS has “sufficiently implemented incident response capabilities to safeguard the department’s information technology systems and data.”
“Incidents involving cybersecurity and privacy threats, such as malware, malicious user activity and vulnerabilities associated with highly interconnected technology require a skilled and rapid response to reduce their likelihood and to reduce or mitigate loss or destruction of data, loss of funds, loss of productivity and damage to the agency’s reputation,” the work plan states.
The OIG expects to issue its results in 2018.
More articles on cybersecurity:
11 cybersecurity terms to know
42.4% of Americans willing to give up alcohol to ensure cybersecurity
WSJ: How to teach cybersecurity to employees
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
