Healthcare.gov is not secure. Increased and unnecessary risks to its security remain, as the Centers for Medicare and Medicaid services has failed to implement and address security issues, a new report finds.
The Government Accountability Office notes CMS has taken numerous steps to protect personal information, as required under federal law, but Healthcare.gov had weaknesses when it was first deployed, including incomplete security plans and privacy documentation, incomplete security tests and it lacked an alternative processing site to avoid major service disruptions.
