Skip Navigation
United States Flag

An official website of the United States government. Here's how you know >

U.S. Flag An official website of the United States government.
Change Font Size

The Information Technology Infrastructure and Operations Office Had Inadequate Information Security Controls

We assessed the adequacy of the Information Technology Infrastructure and Operations Office's (ITIO) information security controls at a selection of the Department of Health and Human Services' operating divisions that are managed by ITIO. Specifically, we reviewed controls over inventory management, patch management, antivirus management, event management, logical access, encryption, configuration management, Web vulnerability management, and Universal Serial Bus port control management.

We found that ITIO had not fully implemented or monitored some information security controls.

We recommended that ITIO implement our detailed recommendations to address the specific findings we identified.

Copies can also be obtained by contacting the Office of Public Affairs at Public.Affairs@oig.hhs.gov.

Download the complete report.

Office of Inspector General, U.S. Department of Health and Human Services | 330 Independence Avenue, SW, Washington, DC 20201