Audit of HRSA's Cybersecurity Controls over the Organ Procurement and Transplantation Network
The National Organ Procurement and Transplantation Network (OPTN) is used to assist medical professionals involved in U.S. organ donation and transplantation. OPTN is operated under contract with the Health Resources and Services Administration (HRSA). The OPTN operates a transplant information database containing national data on the candidate waiting list, organ donation and matching, and transplantation. This system is critical in helping organ transplant institutions match waiting candidates with donated organs. If appropriate cybersecurity controls are not implemented, there may be a significant impact to patients and health care providers should there be a cybersecurity incident. We will conduct a penetration test and determine whether HRSA has ensured there are adequate cybersecurity controls over OPTN.
Announced or Revised | Agency | Title | Component | Report Number(s) | Expected Issue Date (FY) |
---|---|---|---|---|---|
Completed (partial) | Health Resources and Services Administration | Audit of HRSA's Cybersecurity Controls over the Organ Procurement and Transplantation Network | Office of Audit Services | W-00-21-42036; A-18-21-11400 |
2025 |