Transmittal Notice 23-03
BACKGROUND:
The purpose of this chapter is to establish Security Assessment and Authorization policies and procedures, consistent with applicable statutory and regulatory requirements and guidelines, to minimize vulnerabilities in the Indian Health Service (IHS) data and information systems and protect them against associated risks. Security control baselines are included in this chapter to ensure IHS information systems adhere to security requirements defined by the National Institute of Standards and Technology.
/Roselyn Tso /
Roselyn Tso
Director
Indian Health Service
MATERIAL TRANSMITTED:
Part 10, Chapter 4, “Security Assessment and Authorization,” IHM.
MATERIAL SUPERSEDED:
None.
MANUAL MAINTENANCE:
Insert the attached copy of Part 10, Chapter 4, “Security Assessment and Authorization,” IHM, including the chapter Table of Contents, in its place. Log and file this TN in sequential order.
Distribution: IHS-Wide
Date: 05-18-2023
