HHS Defined Roles and Responsibilities, but Can Further Improve Collaboration
What GAO Found The Department of Health and Human Services’ (HHS) Office of Information Security is responsible for managing department-wide cybersecurity. HHS clearly defined responsibilities for the divisions within that office to, among other things, document and implement a cybersecurity program, as required by the Federal Information Security Modernization Act of 2014. For healthcare and…