United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2006-02-24 monographic deposited born digital 46 p. GA 1.13:GAO-06-267 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-06-267 P0b002ee180385d86 f:d06267 DGPO 2010-08-12 2011-03-23 GAOREPORTS-GAO-06-267 machine generated eng fdlp REPORT GAOREPORTS-GAO-06-267 GAO-06-267 Computer networks Confidential information Data integrity Information security Information security management Internal controls Medical information systems Security policies System vulnerabilities Systems evaluation Unauthorized access Policies and procedures Other Written Product A47817 The Department of Health and Human Services (HHS) is the nation's largest health insurer and the largest grant-making agency in the federal government. HHS programs impact all Americans, whether through direct services, scientific advances, or information that helps them choose medical care, medicine, or even food. For example, the Centers for Medicare & Medicaid Services (CMS), a major operating division within HHS, is responsible for the Medicare and Medicaid programs that provide care to about one in every four Americans. In carrying out their responsibilities, both HHS and CMS rely extensively on networked information systems containing sensitive medical and financial information. GAO was asked to assess the effectiveness of HHS's information security program, with emphasis on CMS, in protecting the confidentiality, integrity, and availability of its information and information systems. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-06-267/html/GAOREPORTS-GAO-06-267.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-06-267/pdf/GAOREPORTS-GAO-06-267.pdf GAO-06-267 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-06-267 Other Written Product GAO-06-267; Information Security: Department of Health and Human Services Needs to Fully Implement Its Program; Computer networks Confidential information Data integrity Information security Information security management Internal controls Medical information systems Security policies System vulnerabilities Systems evaluation Unauthorized access Policies and procedures