All Reports and Publications

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

All Reports and Publications

Medicare and Medicaid Payments to Providers Are at Risk of Diversion Through Electronic Funds Transfer Fraud Schemes

Some HHS Requirements for Vetting Mobile Apps Were Not Followed Prior to the Release of the AHRQ Question Builder App

Summary Report of Prior Office of Inspector General Cyber Threat Hunt Audits of Eight HHS Operating Division Networks

The Organ Procurement and Transplantation Network IT System’s Cybersecurity Controls Were Partially Effective and Improvements Are Needed

The Office for Civil Rights Should Enhance Its HIPAA Audit Program to Enforce HIPAA Requirements and Improve the Protection of Electronic Protected Health Information

Review of the Department of Health and Human Services’ Compliance with the Federal Information Security Modernization Act of 2014 for Fiscal Year 2024

HHS Continues to Make Progress Toward Compliance With the Geospatial Data Act

Illinois MMIS and E&E System Had Adequate Security Controls in Place, but Some Improvements Are Needed

HHS Office of the Secretary Needs to Improve Key Security Controls to Better Protect Certain Cloud Information Systems

Review of the Department of Health and Human Services’ Compliance with the Federal Information Security Modernization Act of 2014 for Fiscal Year 2023

ACF Has Enhanced Some Cybersecurity Controls Over the Unaccompanied Children Portal and Data But Improvements Are Needed

Administration for Children and Families Data Hosted in Certain Cloud Information Systems May Be at a High Risk of Compromise

Alabama MMIS and E&E System Security Controls Were Adequate, but Some Improvements Are Needed

Utah MMIS and E&E System Had Adequate Security Controls In Place, but Improvements Are Needed

South Carolina MMIS and E&E System Security Controls Were Adequate, but Some Improvements Are Needed

NIH Generally Implemented System Controls Over the Sequence Read Archive But Some Improvements Needed

HHS Did Not Ensure Foundational Cybersecurity Controls Were in Place Prior to Implementation of HHS Protect and Use of a Contractor's Cloud Service

South Dakota MMIS and E&E System Security Controls Were Partially Effective and Improvements Are Needed

Texas Inappropriately Claimed Nearly $1.8 Million in Federal Medicaid Funds for Private Medicaid Management Information System Contractor Costs

NIH Should Improve Its Management of Contracts for the Acquisition of Information Technology

All Reports and Publications

Filters