Human Services Department

Non-Compliant

2,100 employeesLast assessed Jan 10, 2026PII / Medicaid / HIPAA

High

31%Compliant

Families Implemented

Partially Implemented

Not Implemented

Overall Control Implementation71 of 236 controls (30%)

NIST SP 800-53 Control Families

Access Control

8/25

Partially Implemented

Audit and Accountability

4/16

Partially Implemented

Awareness and Training

2/5

Partially Implemented

Configuration Management

3/11

Partially Implemented

Contingency Planning

2/13

Not Implemented

Identification and Authentication

5/12

Partially Implemented

Incident Response

3/10

Partially Implemented

Maintenance

2/6

Partially Implemented

Media Protection

1/8

Not Implemented

Physical and Environmental Protection

10/20

Partially Implemented

Planning

3/9

Partially Implemented

Personnel Security

4/8

Partially Implemented

Risk Assessment

2/7

Partially Implemented

Security Assessment and Authorization

1/9

Not Implemented

System and Communications Protection

12/44

Partially Implemented

System and Information Integrity

5/17

Partially Implemented

Program Management

4/16

Partially Implemented

Remediation Required by Aug 1, 2026

Conduent breach exposed critical gaps in MMIS systems. Immediate remediation plan required for all HIPAA-covered systems. Legacy mainframe migration must be prioritized.