Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it's official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Office of Audit Services (OAS) Cybersecurity and Information Technology Audit Division (CITAD)

a photo of a digital lock on top of a server

OAS is a part of the HHS Office of Inspector General (OIG). As the largest civilian audit agency in the executive branch, we employ approximately 600 professional auditors in over 37 cities nationwide. We are responsible for the financial integrity of more than 500 departmental programs with expenditures in excess of $1 trillion.

CITAD is a group of IT specialist and specialized auditors within OAS focused on providing timely, impactful, and innovative IT audits of data and information systems maintained by or on behalf of HHS. CITAD is on the front lines of addressing two of OIG's core program integrity principles—prevention and detection of HHS cyberthreats. CITAD's cybersecurity work identifies and makes HHS aware of risk and vulnerabilities while enabling HHS to enhance its security posture.

CITAD is comprised of skilled problem solvers with deep technical knowledge in both cybersecurity and auditing principles. Our specific areas of expertise include: