MD,
United States
Open Recommendations
Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
---|---|---|---|---|---|
23-A-18-078.01 | No | $0 | $0 | ||
We recommend that the Maryland Department of Health remediate the seven control findings OIG identified. | |||||
23-A-18-078.02 | No | $0 | $0 | ||
We recommend that the Maryland Department of Health assess the effectiveness of all required NIST SP 800-53 controls according to the organization's defined frequency. | |||||
23-A-18-078.03 | No | $0 | $0 | ||
We recommend that the Maryland Department of Health assess at least annually and if necessary, adjust baseline configurations for its MMIS and E&E public servers. | |||||
23-A-18-078.04 | No | $0 | $0 | ||
We recommend that the Maryland Department of Health perform periodic phishing exercises and enhance employee and contractor cybersecurity awareness training based on the results of the phishing exercises, if needed. |