OIG identifies big HHS security shortfalls

The IT infrastructure office at the Department of Health and Human Services has received a poor security report card from the Office of Inspector General. The report highlights significant security deficiencies in several areas, including poor patch management controls and improper antivirus management. Similar deficiencies were also found in the HRSA IT security controls.