Program_Memos / 2001 / AB-01-11

Why This Topic Matters

The memorandum affects how Medicare contractors document security compliance, plan system protections, and prepare future funding requests. It also sets deadlines and clarifies which security activities are expected under existing operating budgets versus the new funding process.

Article Sections

1. Overview

   Introduces the broader HCFA initiative to improve Medicare contractor information systems security and describes the high-level objectives of the effort.

2. Implementation and Funding

   Summarizes the new and existing security-related responsibilities and explains the general funding approach for contractor implementation activities.

3. HCFA Core Security Requirements Assessment

   Describes the mandatory assessment tool, the documentation submission process, and the intended uses of the contractor report.

4. Annual Compliance Audit

   Explains the annual audit requirement and identifies the broad compliance areas to be reviewed during the fiscal year.

5. Security Plans

   Covers the requirement for security planning across contractor systems and the related architecture and crosswalk documentation.

6. Gap Analysis and Future Funding

   Outlines the future funding information HCFA will request and the categories of cost information contractors must estimate.

7. Follow-on Program Memorandum (PM)

   Notes that additional submission instructions will follow and briefly addresses internet-related policy limitations and protected data handling.

8. Summary of Key Dates

   Lists the major deadlines for assessments, documentation, funding requirements, audits, risk assessments, and contingency plan updates.

9. Security Questions and Concerns

   Provides contact and reference information for questions about the memorandum and related security resources.