HHS FISMA Compliance Report: Not Effective, 10 Recommendations Made

Wed, 25 Mar 2026 19:13:11 +0000
Cybersecurity

The HHS Office of Inspector General (OIG) has released a report rating HHS's compliance with the Federal Information Security Modernization Act (FISMA) for Fiscal Year 2025 as 'Not Effective' for the sixth consecutive year. The report details ten recommendations to improve HHS's information security program.