Department of Health

Exempt w/ Plan

1,450 employeesLast assessed Jan 22, 2026PHI / HIPAA

Medium

58%Compliant

Families Implemented

Partially Implemented

Not Implemented

Overall Control Implementation147 of 236 controls (62%)

NIST SP 800-53 Control Families

Access Control

15/25

Partially Implemented

Audit and Accountability

10/16

Partially Implemented

Awareness and Training

4/5

Implemented

Configuration Management

7/11

Partially Implemented

Contingency Planning

8/13

Partially Implemented

Identification and Authentication

9/12

Partially Implemented

Incident Response

6/10

Partially Implemented

Maintenance

4/6

Partially Implemented

Media Protection

5/8

Partially Implemented

Physical and Environmental Protection

14/20

Partially Implemented

Planning

6/9

Partially Implemented

Personnel Security

5/8

Partially Implemented

Risk Assessment

4/7

Partially Implemented

Security Assessment and Authorization

5/9

Partially Implemented

System and Communications Protection

26/44

Partially Implemented

System and Information Integrity

9/17

Partially Implemented

Program Management

10/16

Partially Implemented