HHS inspector general finds failure to implement cyber controls in health service system

An HHS telehealth system for the Indian Health Service was deployed without the inclusion of some required cybersecurity measures, according to a new inspector general report.

No major breaches occurred, an audit of the system found, but the health service risked the security of its system and 2.6 million patients’ medical data, and failed to live up to the National Institute of Standards and Technology cybersecurity standards for agencies.

In an audit report released Sept. 8, the Health and...