Securing public health information with mature zero trust
U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES, OFFICE OF INSPECTOR GENERAL (HHS-OIG): Solutions to protect confidential treatment, investigation, and operations data
Challenge: HHS-OIG handles and analyzes large amounts of public health data and personally identifiable information, including grants and Medicare and Medicaid claims. The analysis of these millions of data points supports recommendations for COVID Provider Relief Fund operations, treatments for opioid overdose, investigations of healthcare fraud, and more. These data, program information, and analyses must be protected from sophisticated cyber attacks.
Approach: With TMF support, HHS-OIG is modernizing its cybersecurity infrastructure with zero trust solutions, including:
By the end of the project, GSA:
- Architecting a zero trust network by updating to a secure, cloud-based model aligned with the secure access service edge requirements from the Cybersecurity and Infrastructure Security Agency and national executive orders
- Enabling applications to determine the level of access a user should be given through an enterprise identity management solution
- Investment start: 04/2023
- Project status: Inactive
- Transfer status: 100%
- Repayment status: 50%
- Schedule delay: No
- Cost overruns: No
- ARP funding: Yes
- Commercial product: Yes
- Total TMF investment amount: $18,000,000
- TMF spend to date (obligated): $18,000,000