HHS Watchdog Urges Cyber Governance Overhaul

OIG: Gaps in Standards, Third-Party Oversight Put Agencies, Health Sector at Risk Marianne Kolbasuk McGee (HealthInfoSec) • January 22, 2026

Auditors say the U.S. Department of Health and Human Services should buttress its ability to respond to cyberthreats by standardizing governance and controls across its many divisions - and also do a better job of overseeing its many contractors and the risk they introduce.

See Also: On-Demand | NYDFS MFA Compliance: Real-World Solutions for Financial Institutions

A fractured approach to cybersecurity with varying controls across division and programs "complicate HHS’s preparedness efforts to prevent or respond to cybersecurity risks," wrote the HHS Office of the Inspector General in one of two new reports published this week.

Auditors noted improvements but ...