Page 25 - Security Controls News Today : Breaking News, Live Updates & Top Stories | Vimarsana

This document is an authority to operate memorandum, to operate the federally facilitated marketplace for six months and implement a security mitigation plan. this document, as i understand it, describes security testing for healthcare.gov. it says that security testing of the marketplace was ongoing since its inception and into september of this year. in fact it says that, quote, throughout the three rounds of security control assessment testing, all of the security controls have been tested on different versions of the system. that's good news. but the bad news is that it goes on to say that...

>> you have a tab there. go to tab 2. while you're looking ield read. dated september 27th and it is to marilyn tavenner. let me just a couple of pieces here. there are inherent security risks with not having all cold test understand a single environment. finally the system requires rapid development in release of hot fixes and patches so it is not always available or stable during the duration of the testing. secondly, the security contractor has not been able to test all of the security controls in one complete version of the system. and if it you look in the first part, which is most troubl...

If you go to tab two right there. dated september 27, and it is to maryland. let me just read a couple of pieces here. there are inherent security risks with not having all protested in a single environment. the system requires rapid development and release of hot fixes and patches so it is not easily available or stable during the duration of the testing. secondly the security contractor has not been able to test all the security controls in one complete version of the system. and if you look in the first part which is most troubling of all, it says due to system readiness issues, the securit...

Researchers from security consultancy firm took control of signals to change what an operator sees, to highlight the vulnerabilities, they recently presented their findings publicly. >> as this thing is filling, we can make it look to the operator that our process is actually lowering. >> reporter: hackers could do it because the unit is connected to the internet with a public i.p. address. so are other parts of america's infrastructure that are remotely controlled, like trains and water towers. >> they don't have these security controls in place. >> reporter: how does this manifest itself int...

>> an inspector general report says if there are additional delays in completing the security authorization package cmscio may not have a full assessment of the risks and security controls needed for the security authorization decision by the initial open enrollment period expected to begin on october 1, 2013. >> we need to look at any way possible making sure that we get the president's health care plan out of the way. we have to get the economy moving again. >> a former hshs h hs general counsel and former social security commissioner. nice to see you, sir. >> nice to see you. >> the roll-ou...