Finding 2023-002
Bridges Security Management and Access Controls
Management Views
MDHHS agrees with the finding.
Planned Corrective Action
For parts a., c., and d., MDHHS implemented the Database Security Application (DSA) on October 2, 2023, which includes documenting incompatible role exception ...
Finding 2023-002
Bridges Security Management and Access Controls
Management Views
MDHHS agrees with the finding.
Planned Corrective Action
For parts a., c., and d., MDHHS implemented the Database Security Application (DSA) on October 2, 2023, which includes documenting incompatible role exception requests and user access request approvals. The DSA also includes semi-annual review of privileged users and annual review for all users.
For parts b. and e., MDHHS will revise internal business processes to include an additional level of monitoring and review to ensure compliance with the existing directives related to monitoring and review requirements.
Anticipated Completion Date
a., c., and d. Completed
b. and e. August 2024
Responsible Individual(s)
a., c., and d. Deon Nelson, MDHHS
b. and e. Veronica Maxson, MDHHS