Task 1.14.4 of 4
Require annual third-party security audits; publish results.
Who does it
UHA / IG
When
Annual
Trade-off
Published audits build trust but disclose weaknesses attackers could exploit.
Part of: Set data governance & privacy rules
A single payer holds every American's claims history. Strict rules decide who can see it, for what purpose, and how it is protected.
This step changes 1 existing laws, programs, or institutions. See the list.