Summary Report for Fiscal Year 2016 OIG Penetration Testing of Four HHS Operating Division Networks

We conducted a series of OIG audits at four HHS Operating Divisions (OPDIVs) using network and web application penetration testing to determine how well HHS systems were protected when subject to cyberattacks.