OIG audit of hospital’s cybersecurity finds vulnerabilities in common web applications

The U.S. Department of Health and Human Services OIG audited a large Southeastern hospital and found security vulnerabilities in four internet-accessible web applications that could enable cyberattacks, warning the entity may struggle to detect breaches without stronger defenses; the review assessed controls to prevent unauthorized intrusion, ensure continuity of patient care, and protect patient data (notably for Medicare enrollees), noting the hospital uses the HITRUST CSF v9.4; see the [OIG report](https://oig.hhs.gov/documents/audit/11461/A-18-22-08021.pdf) and coverage at [HealthExec](https://healthexec.com/topics/health-it/cybersecurity/oig-audit-hospitals-cybersecurity-finds-vulnerabilities-common-web-applications).