Search | CMS Information Security and Privacy Program

Skip to main content

Policy Documents
CMS Privacy Program Plan
A plan designed to help CMS staff understand the specific requirements of the Privacy Program at CMS
Privacy program at CMS Use and disclosure As authorized …
General Information
CMS Information Security Advisory Board (CISAB)
A volunteer board comprised of ISPG staff and the ISSO community designed to promote collaboration on cybersecurity and privacy issues
What is the CMS Information Security Advisory Board (CISAB)? The …
General Information
Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Summary of HIPAA and its policies, and their implications for ISPG
How does HIPAA apply at ISPG? The Health Insurance Portability …
General Information
Email Encryption Requirements at CMS
Summary of email encryption practices required by federal policies and directives that help CMS employees keep sensitive information safe
What is considered “sensitive information”? CMS sensitive information is any …
General Information
Breach Response
The steps taken at CMS in response to a suspected breach of personally identifiable information (PII)
Protecting sensitive information at CMS CMS systems contain the personal …
General Information
System Security and Privacy Plan (SSPP)
Documentation of a FISMA system’s features and security requirements, along with controls and procedures for information protection
What is a System Security and Privacy Plan (SSPP)? The …
General Information
System of Records Notice (SORN)
Notice provided to the public regarding records maintained by CMS and how those records will be used
What is a System of Records Notice (SORN)? A System …
General Information
CMS Computer Matching Agreement (CMA)
Written agreement used in the comparison of automated systems of record between federal or state agencies
What is a Computer Matching Agreement (CMA)? A Computer Matching …
General Information
Privacy Impact Assessment (PIA)
Process that identifies and mitigates privacy risks for CMS systems regarding the use of Personally Identifiable Information (PII)
What is a Privacy Impact Assessment (PIA)? A Privacy Impact …
Topic Page
Privacy
Policies and programs that support the protection of sensitive information entrusted to CMS by beneficiaries and healthcare providers
Every day, millions of Americans trust CMS with their sensitive …