What security risk assessments has the NHSN undergone?
The NHSN has undergone and passed an extensive Certification and Accreditation (C&A) security risk assessment required for federal IT systems. The NHSN software has been scanned for software vulnerabilities and has passed. New releases of the software will be scanned if new content affects the security posture of the system.
Related Questions
- Can the vulnerability assessments, risk assessments and security tests specified in the Security Plan be conducted internally by the applicant?
- Why are renewals being requested for security risk assessments that have not yet expired?
- Why is CJIS requesting renewals of security risk assessments that have not yet expired?
