All AgenciesPartially ImplementedPartially ImplementedPartially ImplementedPartially ImplementedPartially ImplementedPartially ImplementedPartially ImplementedPartially ImplementedNot ImplementedPartially ImplementedPartially ImplementedPartially ImplementedPartially ImplementedNot ImplementedPartially ImplementedPartially ImplementedPartially Implemented
Children, Youth and Families Dept
Non-Compliant1,890 employeesLast assessed Dec 12, 2025PII / Child Welfare
High
35%Compliant
0
Families Implemented
15
Partially Implemented
2
Not Implemented
Overall Control Implementation82 of 236 controls (35%)
NIST SP 800-53 Control Families
AC
Access Control
9/25
AU
Audit and Accountability
5/16
AT
Awareness and Training
3/5
CM
Configuration Management
4/11
CP
Contingency Planning
4/13
IA
Identification and Authentication
5/12
IR
Incident Response
4/10
MA
Maintenance
2/6
MP
Media Protection
2/8
PE
Physical and Environmental Protection
9/20
PL
Planning
3/9
PS
Personnel Security
3/8
RA
Risk Assessment
2/7
CA
Security Assessment and Authorization
2/9
SC
System and Communications Protection
14/44
SI
System and Information Integrity
6/17
PM
Program Management
5/16
Remediation Required by Sep 1, 2026
SACWIS case management system requires major security overhaul. Budget request submitted for FY27.