HHS’ information security program is ineffective, audit finds

HHS’ information security program was deemed “not effective” for fiscal year 2021 in an audit conducted by the department’s Office of Inspector General, consistent with the determinations for fiscal years 2018, 2019 and 2020.