Quality Software Services, Inc., Had Not Implemented Universal Serial Bus Device and Port Controls

Quality Software Services, Inc., the testing contractor for Medicare Part A and B standard system changes, did not sufficiently implement required information system security controls over universal serial bus ports and devices, thus risking exposure of over 6 million Medicare beneficiaries' sensitive information to malware, inappropriate access, or theft.