"Although [CMS] had implemented controls to secure Healthcare.gov and consumer personally identifiable information (PII) on the Federal Marketplace, [we (the Office of Inspector General)] identified areas for improvement in its information security controls.... This summary does not include specific details of the vulnerabilities that we identified because of the sensitive nature of the information. We have provided more detailed information and recommendations to officials of the three Marketplaces so the issues we identified could be appropriately addressed."  MORE >>