OIG again deems HHS’ infosec program ineffective

Similar to its findings last year, the Office of Inspector General said Tuesday that the U.S. Health and Human Services continued to have difficulty in identifying, detecting, responding to and recovering from threats to information security. 

WHY IT MATTERS

In its annual audit required by the Federal Information Security Modernization Act of 2014, OIG said it reviewed HHS programs and practices against its core and supplemental…