Audit: CMS' Implementation of Security Controls Over the Multidimensional Insurance Data Analytics System Needs Improvement

This summary report provides an overview of the results of the Office of Inspector General’s (OIG) review of the Multidimensional Insurance Data Analytics System (MIDAS). It does not include specific details of the vulnerabilities that we identified because of the sensitive nature of the information. We have provided more detailed information and recommendations to officials responsible for the MIDAS so that they can address the issues we identified. The findings listed in this summary reflect a point in time regarding system security and may have changed since we reviewed these systems.