CMS Acceptable Risk Safeguards (ARS)

Centers for Medicare & Medicaid Services Office of Information Technology (OIT) Information Security and Privacy Group 7500 Security Boulevard Baltimore, Maryland 21244-1850 Standard: CMS Information Security and Privacy Acceptable Risk Safeguards (ARS) CMS Acceptable Risk Safeguards (ARS) Final Version Document Number: November 21, 2017 Effective Date/Approval This Standard becomes effective on the date that CMS s Chief Information Officer (CIO) signs it and remains in effect until it is rescinded, modified, or superseded. Date of Signature: /S/ Issuance 11/21/2017 George Hoffmann Acting Chief Information Officer and Acting Director, Office of Information Technology (OIT) Standard Owner s Review Certification This document must be reviewed in accordance with the established review schedule located on the CMS website Date of Annual Signature: /S/ Review: 11/17/2017 Emery Csulak CMS Chief Information Security Officer and Senior Official for Privacy Final Centers for Medicare & Medicaid Services Summary of Changes Version Number Editor Name Date Table Column Heading Description of Change CMS 01/24/2017 Entire document Major Revision CMS 10/12/2017 Entire do

A control baseline is the minimum list of security controls required for safeguarding an IT system based on the organizationally ... This Policy uses the term “CMS Sensitive Information” as defined in the Risk Management Handbook Volume I Chapter 10, CMS Risk Management Terms, Definitions, and Acronyms ... such as Personally Identifiable ...

Loading..

Tags:

  Handbook, Risks, Acceptable, Sensitive, Safeguards, Safeguarding, Acceptable risk safeguards, For safeguarding

Information