Search | CMS Information Security and Privacy Program

Policy Documents
CMS Privacy Program Plan
A plan designed to help CMS staff understand the specific requirements of the Privacy Program at CMS Privacy program at CMS Use and disclosure As authorized …
General Information
Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Summary of HIPAA and its policies, and their implications for ISPGHow does HIPAA apply at ISPG? The Health Insurance Portability …
General Information
Email Encryption Requirements at CMS
Summary of email encryption practices required by federal policies and directives that help CMS employees keep sensitive information safeWhat is considered “sensitive information”? CMS sensitive information is any …
General Information
Breach Response
The steps taken at CMS in response to a suspected breach of personally identifiable information (PII)Protecting sensitive information at CMS CMS systems contain the personal …
General Information
System Security and Privacy Plan (SSPP)
Documentation of a FISMA system’s features and security requirements, along with controls and procedures for information protectionWhat is a System Security and Privacy Plan (SSPP)? The …
General Information
System of Records Notice (SORN)
Notice provided to the public regarding records maintained by CMS and how those records will be usedWhat is a System of Records Notice (SORN)? A System …
General Information
CMS Computer Matching Agreement (CMA)
Establishes the terms and conditions used in the comparison of automated systems of record between federal or state agenciesWhat is a Computer Matching Agreement (CMA)? A Computer Matching …
General Information
Privacy Impact Assessment (PIA)
Process that identifies and mitigates privacy risks for CMS systems regarding the use of Personally Identifiable Information (PII)What is a Privacy Impact Assessment (PIA)? A Privacy Impact …
General Information
CMS Information Exchange Agreement (IEA)
Business Owners and Privacy Advisors working together to determine the terms of sharing PII with other federal or state agenciesWhat is an Information Exchange Agreement (IEA)? An Information Exchange …
Articles
Program Management: Strengthening Security and Privacy Across the Enterprise
Program Management (PM) requires strong governance, leadership, and oversight at the enterprise level.Program Management at CMS: Strengthening Security and Privacy Across the …

Search Results

Web results with site links

CMS Privacy Program Plan

Health Insurance Portability and Accountability Act of 1996 (HIPAA)

Email Encryption Requirements at CMS

Breach Response

System Security and Privacy Plan (SSPP)

System of Records Notice (SORN)

CMS Computer Matching Agreement (CMA)

Privacy Impact Assessment (PIA)

CMS Information Exchange Agreement (IEA)

Program Management: Strengthening Security and Privacy Across the Enterprise