Audit of HHS Information System Security Controls to Track Prescription Drug Disbursements

HHS is responsible for implementing appropriate controls in Indian Health Service (IHS) hospitals to track the disbursement of prescription drugs (including opioids and other Schedule II drugs) in accordance with Federal security requirements. Prior OIG audits reported that HHS lacks sufficient security controls, which potentially impact abuse of prescription drugs. We will determine whether HHS applications that track the disbursement of prescription drugs meet Federal information security standards. We will focus on access and physical controls. For selected IHS hospitals, we will review security controls and use OIG's automated assessment tools to assess the security of the networks and web-facing applications.

Announced or Revised	Agency	Title	Component	Report Number(s)	Expected Issue Date (FY)
Completed (partial)	Other	Audit of HHS Information System Security Controls to Track Prescription Drug Disbursements	Office of Audit Services	A-18-16-30540; W-00-16-42020	2019