Upgrades to security have improved the safety of confidential information on according to the U.S. Government Accountability Office. The GOA published a report suggesting six recommendations as well to further improve security.

Security Concerns for

The U.S Government Accountability Office (GAO) recently found that although is significantly more secure than at its launch in 2013, there are still major security concerns that continue to put sensitive information at risk. The GAO report, released on September 16, identified several weaknesses in the confidentiality, integrity and availability of the site.

The main Marketplace system of serves as an enrollment portal for 34 states, while the Federal Data Services Hub connects the Marketplace system and other state and federal systems. The GOA report addressed security issues concerning both the Marketplace system and the Federal Data Services Hub.

Several federal agencies exchange information with, including the U.S. Departments of Defense and Homeland Security, the Internal Revenue Service, and the Social Security Administration. Commercial bodies such as CMS contractors and health insurance plan administrators also share information with the site.

Included in the GOA report are six recommendations to improve the security and privacy of

  1. Ensure that the security plans for the Marketplace and Federal Data Services Hub contain the information recommended by the National Institute of Standards and Technology.
  2. Confirm that all privacy risks are analyzed and documented in privacy impact assessments.
  3. Develop separate computer matching agreements with multiple federal agencies to govern data used to verify eligibility for tax credit and cost-sharing reductions.
  4. Perform a complete security assessment of the Marketplace system, evaluating the infrastructure, platform and all deployed software elements.
  5. Ensure that the alternate processing site for the systems supporting is operational as soon as possible.
  6. Establish detailed security responsibilities for contractors, including participation in security controls reviews, in order to make certain that communications between individuals and entities are as effective as possible.

Author: Lauren Daniels

Please fill the form for a quick Discovery Call from PrognoCIS EHR

Please fill out the fields below

* These fields are required.

By clicking submit you agree to our Terms of Use and consent to our contact process. See our Privacy Policy to unsubscribe.

Get Your FREE Medical Billing Analysis