The information security program of the United States’ Department of Health and Human Services (HHS) has been deemed ineffective for a fourth consecutive year. Audits conducted for the HHS’ Office of Inspector General (OIG) to assess compliance with the Federal Information Security Modernization Act of 2014 (FISMA) in the fiscal years 2018, 2019, 2020 and 2021 have all resulted in the program receiving a ‘not effective’ rating.

Read full article on Infosecurity