The state of Maryland has not adequately secured its Medicaid Management Information System in accordance with federal requirements and guidance, potentially putting sensitive data and its operations at risk.
That’s the finding of an audit by the Department of Health and Human Services’ Office of Inspector General, which used vulnerability assessment scanning software to determine whether security-related vulnerabilities existed on selected MMIS supporting network devices, websites, servers, and databases.
