Stay Informed
of New Reports
Twitter
Where To Report Waste
Fraud, Abuse, Or Retaliation
Where To Report Waste Fraud, Abuse, Or Retaliation

Puerto Rico MMIS and E&E Systems Security Controls Were Generally Effective, but Some Improvements Are Needed

Submitting OIG: 
Department of Health & Human Services OIG
Date Issued: 
Friday, November 18, 2022
Agency Reviewed / Investigated: 
Department of Health & Human Services
Submitting OIG-Specific Report Number: 
A-18-20-08005
Component, if applicable: 
Centers for Medicare & Medicaid Services
Centers for Medicare and Medicaid Services
External entity, if applicable: 
Puerto Rico Department Of Health
Location(s): 
PR,
United States
Type of Report: 
Audit
Questioned Costs: 
$0
Funds for Better Use: 
$0
Number of Recommendations: 
2
View Document: 
AttachmentSize
PDF icon 182008005.pdf969.34 KB

Related Open Recommendations

Recommendation Number Recommendation Status Significant Recommendation Additional Details
23-A-18-016.01 Open No
We recommend that the Puerto Rico Department of Health remediate the vulnerabilities related to the five security control findings identified by properly implementing and regularly assessing the associated NIST SP 800-53 controls
23-A-18-016.02 Open No
We recommend that the Puerto Rico Department of Health assess and adjust, if necessary, at least annually, the cryptographic configurations of public servers.
Displaying 2 of 2 Recommendations