Skip to main contentSkip to feedback
U.S. flag

An official website of the United States government

Office of Audit Services (OAS) Cybersecurity and Information Technology Audit Division (CITAD)

Graphic of a digital padlock

OAS is a part of the HHS Office of Inspector General (OIG). We employ approximately 600 professional auditors in over 37 cities nationwide. We are responsible for the financial integrity of more than 500 departmental programs with expenditures in excess of $1 trillion.

CITAD is a group of IT specialist and specialized auditors within OAS focused on providing timely, impactful, and innovative IT audits of data and information systems maintained by or on behalf of HHS. CITAD is on the front lines of addressing two of OIG's core program integrity principles—prevention and detection of HHS cyberthreats. CITAD's cybersecurity work identifies and makes HHS aware of risk and vulnerabilities while enabling HHS to enhance its security posture.

CITAD is comprised of skilled problem solvers with deep technical knowledge in both cybersecurity and auditing principles. Our specific areas of expertise include:

  • Penetration testing
  • IT risk assessments
  • Contingency planning and disaster recovery
  • System development methodologies
  • Vulnerability scanning tools
  • Cloud computing
  • Technical written and oral communications
  • National Institutes of Standards and Technology (NIST) Guidance