New HHS Documents Reveal Security Concerns, Healthcare.gov Had No "Authorization to Operate"

Judicial Watch ^ | JANUARY 19, 2016

[caver]

Should we be surprised?

[Cletus.D.Yokel]

So, that is to say that the Executive branch ignored the process of executing the law?

Horrors!

[SaveFerris]

Hillary and Bernie were both praising the ACA the other night.

Has America had enough of DNC shenanigans yet? Well, 47% or so can’t figure it out. Duuuuuuuuuuuuuuuuuuh

[ImJustAnotherOkie]

Unless I’m suprised by an obvious conclusion. What would surprise me is if anyone is held accountable above grunt level.

[caver]

And they called Reagan the Teflon President. Geez...

[DoughtyOne]

Please Participate in the Free Republic Caucus (each day)

Thank you.

Be sure to read the rules and follow them so your candidate will benefit from you vote.

LINK

[blondiegoodbadugly]

I’m shocked too!

Truly shocked! /sarc

[blondiegoodbadugly]

(Unless I’m suprised by an obvious conclusion. What would surprise me is if anyone is held accountable above grunt level.)

You won’t be surprised on accoutable either, but you already know it.

[Lazamataz]

I know a bit about the ATO. Failure to secure this means the app CANNOT GO ONLINE.

The fact it did means someone high up overrid the entire Certification process.

This is huge.

[Lazamataz]

This is huge.

I know a lot about this. OCISO requires the following: You need an approved BSI (Business Systems Information), a proper ASA (Annual Self-Assessment, even for a new App), a PIA (Privacy Information Assessment), and a Security Controls document -- and the current version, V 4.0, is 165 pages! THAT gets you an ATO.

This is a complete fustercluck.

[Lazamataz]

17 initial "moderate" security issues findings and two "high" security issues.

HOLY CRUD.

TWO "HIGHS" and SEVENTEEN "MEDIUMS"?

I could never get an appscan with even a single "medium" if I hoped to deploy.

[Lazamataz]

This is EXACTLY what I have been doing for a living since 2009. This is incredible. See my above.

[Lazamataz]

Oh, I forgot: Also, a C&A was required, which had to be approved by the ISSO (Information Systems Security Officer).

[MadMax, the Grinning Reaper]

LAZ: I’m really impressed with what you wrote about the OCISO et al. I read all your comments and didn’t understand a single word but I got the baseline, namely that Obama completely disregarded safeguard protocols and procedures.

It wasn’t just a fustercluck. It was a GeorgeCusterfustercluck. Or, as Crazy Horse said to General Custer, welcome to Little Big Horn. We have cookies.

[Lazamataz]

Someone high-grade had to approve this.

Someone way above the position of ISSO (Information Systems Security Officer).

Someone in the Office of Computer Information Security Operations (OCISO).

HHS falls under OCISO’s rules. Not sure about other Fed Agencies, but I know for a fact HHS does.

Just like Matt is an authority on Cross Border Authority and Benghazi, and the rules surrounding the Iranian boat hijacking, so am I an authority in this topic.

This is just as huge as Benghazi and the Iranian boat incident.

[Lazamataz]

What Judicial Watch wants to know, is WHO AUTHORIZED THIS DEPLOY WITH NO ATO. It has to be someone high-up in OCISO. This cannot be accomplished by anyone lower in level or rank. This is a complete override of established Fedgov Protocols.

That is where this whole thing will unravel.

JR, read backwards. I was in this world, intimately, until recently.

[MadMax, the Grinning Reaper]

HHS and Sebelius. Two disasters that happened.

Thanks for giving us an unique insight into the order of security authority.

Keep us informed because few others can or will do it with your experience and observations.

[Southack]

Judicial Watch has found a way to take down a career bureaucrat who did the bidding of the 0bama Administration.

Might be the first domino to fall.

[freepersup]

What is glaringly obvious is that Judicial Watch is continually doing the work of the eunuchs in Congress. The utter disgust is indescribable. Their approval rating is a negative number in freefall. I want to do something, but I don't want to languish in a federal penitentiary for the rest of my life. GRRR!