Skip Navigation
United States Flag

An official website of the United States government. Here's how you know >

Change Font Size

Oversight of States' Medicaid Information Systems Security Controls

Centers for Medicare & Medicaid Services is responsible for ensuring that appropriate security controls have been implemented over States' Medicaid information systems. Prior OIG audits reported that States lack sufficient security features, potentially exposing Medicaid beneficiary health information to unauthorized access. We will determine whether the States safeguarded Medicaid data and supporting systems in accordance with Federal requirements. We will review general controls and use OIG's automated assessment tools to assess controls for their information system networks, databases, and web-facing applications.

Announced or Revised Agency Title Component Report Number(s) Expected Issue Date (FY)
October 2017 Centers for Medicare & Medicaid Services Oversight of States' Medicaid Information Systems Security Controls Office of Audit Services W-00-17-41015; various reviews 2018

Office of Inspector General, U.S. Department of Health and Human Services | 330 Independence Avenue, SW, Washington, DC 20201