HealthCare.gov ducked final security requirements before launch

(CBS News) WASHINGTON — The health care website went down again Monday for an hour and a half, and no one is sure why. It’s being taken offline on purpose every night from 1 a.m. to 5 a.m. for repairs. Millions are still having trouble buying insurance on it, and it turns out that even when the website works, it may not be secure enough to protect privacy.

As HealthCare.gov was being developed, crucial tests to ensure the security and privacy of customer information fell behind schedule.

CBS News analysis found that the deadline for final security plans slipped three times from May 6 to July 16. Security assessments to be finished June 7 slid to August 16 and then August 23. The final, required top-to-bottom security tests never got done.

The House Oversight Committee released an Obama administration memo that shows four days before the launch, the government took an unusual step. It granted itself a waiver to launch the website with “a level of uncertainty … deemed as a high (security) risk.”

 

CBS News has the full article

You may also like...