The Department of Health and Human Service’s Center for Medicare & Medicaid Services allowed state Obamacare exchanges to launch at the beginning of October without having an independent security assessment completed, as required by OMB guidelines and federal law. A recently discovered document published by the Center for Medicare & Medicaid Services (CMS), raises serious questions about the security and privacy of the state health insurance exchanges and further highlights the extent to which the Obama Administration skirted federal standards in order to launch the exchanges by October 1.