Skip to main content

Department of Health and Human Services

Jump To:

Open Recommendations (10 total)

IT Dashboard: Selected Agencies’ Investment Ratings Fail to Fully Consider Risks

Show
3 Open Recommendations
Agency Affected Recommendation Status
Department of Health and Human Services The Secretary of Health and Human Services should direct the department CIO to update their policies and procedures for their ratings to be reported at least as frequently as required in OMB's guidance. (Recommendation 9)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Department of Health and Human Services The Secretary of Health and Human Services should direct the department CIO to update their ratings in a timely manner consistent with their processes. (Recommendation 8)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Department of Health and Human Services The Secretary of Health and Human Services should direct the department CIO to ensure, for any investment we identified with more risk, that their rating accurately reflects the ability of the investment to accomplish its goals. (Recommendation 7)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Small Business Research Programs: Better Data Could Improve Insight into Companies’ Success

Show
1 Open Recommendations
Agency Affected Recommendation Status
Department of Health and Human Services The Secretary of Health and Human Services should require Phase II applicants to submit with their proposals proof that they updated commercialization information—such as a copy of updated commercialization reports—for Phase II awards that they completed within the last 5 years. (Recommendation 3)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Cybersecurity: HHS Should Strengthen Oversight and Enhance Security Controls for the 988 Suicide and Crisis Lifeline

Show
6 Open Recommendations
Agency Affected Recommendation Status
Department of Health and Human Services The Secretary of HHS should direct the Assistant Secretary for Mental Health and Substance Abuse to ensure that the network administrator includes key elements of a disaster recovery plan in the contingency plan. (Recommendation 9)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Department of Health and Human Services The Secretary of HHS should direct the Assistant Secretary for Mental Health and Substance Abuse to incorporate the seven missing cybersecurity control areas from HHS's CPG in the 988 Lifeline cooperative agreement. (Recommendation 1)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Department of Health and Human Services The Secretary of HHS should direct the Assistant Secretary for Mental Health and Substance Abuse to work with the network administrator to establish requirements for crisis contact centers' development of contingency planning policies and monitor the implementation of such policies. (Recommendation 8)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Department of Health and Human Services The Secretary of HHS should direct the Assistant Secretary for Mental Health and Substance Abuse to work with the network administrator to establish requirements for crisis contact centers' development of incident response planning policies and monitor the implementation of such policies. (Recommendation 5)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Department of Health and Human Services The Secretary of HHS should direct the Assistant Secretary for Mental Health and Substance Abuse to work with the network administrator to implement the current NIST password guidance. (Recommendation 4)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
Department of Health and Human Services The Secretary of HHS should direct the Assistant Secretary for Mental Health and Substance Abuse to work with the network administrator to establish requirements for crisis contact centers' development of incident response training and testing and monitor implementation of such training and testing. (Recommendation 7)
Open
When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.