Audit of NIH's Oversight of the All of Us Research Program Award Recipients
The National Institutes of Health (NIH) is the primary Federal agency for conducting and supporting biomedical research. The All of Us Research Program (AoURP) is a major component of the Precision Medicine Initiative overseen by the NIH. The AoURP is responsible for building a national research cohort of more than 1 million participants who provide their personal health information to NIH so that researchers, providers, and patients can work together to build a better future for health care. Without appropriate security and privacy controls to protect AoURP data, the AoURP and its award recipients cannot effectively minimize information security and cybersecurity risks to an acceptable level.The purpose of this audit is to determine whether the AoURP's award recipients: (1) limit program research data access, (2) implement information security and privacy controls, and (3) remediate information security and privacy weaknesses in accordance with Federal requirements.
Announced or Revised | Agency | Title | Component | Report Number(s) | Expected Issue Date (FY) |
---|---|---|---|---|---|
February 2024 | Health and Human Services / Office of the Secretary | Audit of NIH's Oversight of the All of Us Research Program Award Recipients | Office of Audit Services | W-00-24-42045 | 2025 |