cms-gov/www.cms.gov/rss/30716

<?xml version="1.0" encoding="utf-8"?>
        <rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">
        <channel xml:base="https://www.cms.gov/rss/30716">
        <title>Information Security and Privacy Library</title>
        <link>https://www.cms.gov/rss/30716</link>
        <description/>
        <atom:link href="https://www.cms.gov/rss/30716" rel="self" type="application/rss+xml" />
        <lastBuildDate>Wed, 26 Feb 2025 08:09:33 -0500</lastBuildDate>
        <generator>Centers for Medicare and Medicaid Services</generator><item><title>Privacy Program Manual</title><pubDate>Thu, 17 Nov 2022 13:17:05 -0500</pubDate><link>https://www.cms.gov//wwwcmsgovresearch-statistics-data-and-systemscms-information/privacy-program-manual</link><guid>https://www.cms.gov//wwwcmsgovresearch-statistics-data-and-systemscms-information/privacy-program-manual</guid><description><![CDATA[<p>title: Privacy Program Manual</p><p>version_number: v1</p>]]></description></item><item><title>Key Management Program Manual</title><pubDate>Thu, 17 Nov 2022 13:12:57 -0500</pubDate><link>https://www.cms.gov//httpscmsgovresearch-statistics-data-and-systemscms-information/key-management-program-manual</link><guid>https://www.cms.gov//httpscmsgovresearch-statistics-data-and-systemscms-information/key-management-program-manual</guid><description><![CDATA[<p>title: Key Management Program Manual</p><p>version_number: V1</p>]]></description></item><item><title>Acceptable Risk Safeguards 5.1x</title><pubDate>Wed, 29 Dec 2021 15:37:59 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/acceptable-risk-safeguards-50x</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/acceptable-risk-safeguards-50x</guid><description><![CDATA[<p>category: ARS</p><p>date: Wed, 26 Jul 2023 17:35:51 -0400</p><p>display_text: Acceptable Risk Safeguards 5.1x</p><p>oit_type: guidelines_tools</p><p>title: Acceptable Risk Safeguards 5.1x</p><p>version_number: 5.1x</p>]]></description></item><item><title>CISO Memorandum 21-02 HVA Identification Criteria</title><pubDate>Tue, 17 Aug 2021 14:31:12 -0400</pubDate><link>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/ciso-memorandum-21-02-hva-identification-criteria</link><guid>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/ciso-memorandum-21-02-hva-identification-criteria</guid><description><![CDATA[<p>category: CISO Memorandum</p><p>date: Tue, 17 Aug 2021 18:29:44 -0400</p><p>display_text: CISO Memorandum 21-02 HVA Identification Criteria</p><p>oit_type: guidelines_tools</p><p>title: CISO Memorandum 21-02 HVA Identification Criteria</p><p>version_number: 1</p>]]></description></item><item><title>CIO Memorandum CMS Strategy for Encrypting Sensitive Information</title><pubDate>Thu, 06 May 2021 14:50:30 -0400</pubDate><link>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/cio-memorandum-cms-strategy-encrypting-sensitive-information</link><guid>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/cio-memorandum-cms-strategy-encrypting-sensitive-information</guid><description><![CDATA[<p>category: Informational</p><p>date: Thu, 06 May 2021 16:32:31 -0400</p><p>display_text: CIO Memorandum CMS Strategy for Encrypting Sensitive Information</p><p>oit_type: memorandum</p><p>title: CIO Memorandum CMS Strategy for Encrypting Sensitive Information</p><p>version_number: 1.0</p>]]></description></item><item><title>CISO Memorandum 21-01: Best Practices and Guidance for the Use of Approved CMS Collaboration Tools</title><pubDate>Wed, 31 Mar 2021 10:15:48 -0400</pubDate><link>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/ciso-memorandum-21-01-best-practices-and-guidance-use-approved-cms-collaboration-tools</link><guid>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/ciso-memorandum-21-01-best-practices-and-guidance-use-approved-cms-collaboration-tools</guid><description><![CDATA[<p>title: CISO Memorandum 21-01: Best Practices and Guidance for the Use of Approved CMS Collaboration Tools</p><p>version_number: 1.0</p>]]></description></item><item><title>CMS Vulnerability Disclosure Policy Program</title><pubDate>Fri, 26 Feb 2021 15:45:14 -0500</pubDate><link>https://www.cms.gov//httpswwwcmsgovabout-cmsagency-informationaboutwebsitevulnerability-disclosure-policy/cms-vulnerability-disclosure-policy-program</link><guid>https://www.cms.gov//httpswwwcmsgovabout-cmsagency-informationaboutwebsitevulnerability-disclosure-policy/cms-vulnerability-disclosure-policy-program</guid><description><![CDATA[<p>date: Fri, 26 Feb 2021 17:36:51 -0500</p><p>display_text: Vulnerability Disclosure Policy Program</p><p>oit_type: guidelines_tools</p><p>title: Vulnerability Disclosure Policy Program</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 01 Access Control</title><pubDate>Tue, 01 Dec 2020 16:34:51 -0500</pubDate><link>https://www.cms.gov//https/wwwcmsgov/research-statistics-data-and-systems/cms-information-technology/informationsecurity/rmh-chapter-01-access-control</link><guid>https://www.cms.gov//https/wwwcmsgov/research-statistics-data-and-systems/cms-information-technology/informationsecurity/rmh-chapter-01-access-control</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 01 Dec 2020 17:00:00 -0500</p><p>display_text: RMH Chapter 01 Access Control</p><p>oit_type: procedure</p><p>title: RMH Chapter 01 Access Control</p><p>version_number: 1.0</p>]]></description></item><item><title>Plan of Action and Milestones Process Guide</title><pubDate>Wed, 04 Nov 2020 09:25:53 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/plan-action-and-milestones-process-guide</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/plan-action-and-milestones-process-guide</guid><description><![CDATA[<p>category: Plan of Action and Milestones</p><p>date: Tue, 23 Mar 2021 13:23:47 -0400</p><p>display_text: Plan of Action and Milestones Process Guide</p><p>oit_type: form_templates</p><p>title: Plan of Action and Milestones Process Guide</p><p>version_number: 1.1</p>]]></description></item><item><title>ISSO Appointment Letter</title><pubDate>Thu, 20 Aug 2020 22:05:18 -0400</pubDate><link>https://www.cms.gov//https/wwwcmsgov/research-statistics-data-and-systems/cms-information-technology/informationsecurity/isso-letter-guide-welcome-packet</link><guid>https://www.cms.gov//https/wwwcmsgov/research-statistics-data-and-systems/cms-information-technology/informationsecurity/isso-letter-guide-welcome-packet</guid><description><![CDATA[<p>category: ATO Process</p><p>date: Thu, 18 Jun 2020 16:00:00 -0400</p><p>display_text: ISSO Appointment Letter</p><p>oit_type: guidelines_tools</p><p>title: ISSO Appointment Letter</p><p>version_number: 1.0</p>]]></description></item><item><title>CIO Memorandum: Recovery Time Objective Requirements </title><pubDate>Wed, 05 Aug 2020 15:10:09 -0400</pubDate><link>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/cio-memorandum-recovery-time-objective-requirements</link><guid>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/cio-memorandum-recovery-time-objective-requirements</guid><description><![CDATA[<p>category: CIO Memorandum</p><p>date: Wed, 22 Jul 2020 16:00:00 -0400</p><p>display_text: CIO Memorandum: Recovery Time Objective Requirements </p><p>oit_type: guidelines_tools</p><p>title: CIO Memorandum: Recovery Time Objective Requirements </p><p>version_number: 1</p>]]></description></item><item><title>CISO Memorandum 20-01: CMS Implementation of the HHS Plan of Action and Milestones</title><pubDate>Wed, 05 Aug 2020 14:51:44 -0400</pubDate><link>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/ciso-memorandum-20-01-cms-implementation-hhs-plan-action-and-milestones</link><guid>https://www.cms.gov//httpswwwcmsgovresearch-statistics-data-and-systemscms-information/ciso-memorandum-20-01-cms-implementation-hhs-plan-action-and-milestones</guid><description><![CDATA[<p>category: CISO Memorandum</p><p>date: Wed, 05 Aug 2020 16:00:00 -0400</p><p>display_text: CISO Memorandum 20-01: CMS Implementation of the HHS Plan of Action and Milestones</p><p>oit_type: guidelines_tools</p><p>title: CISO Memorandum 20-01: CMS Implementation of the HHS Plan of Action and Milestones</p><p>version_number: 1</p>]]></description></item><item><title>RMH Chapter 08 Incident Response - Incident Preparation Checklist</title><pubDate>Wed, 29 Jul 2020 14:09:35 -0400</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-08-incident-response-incident-preparation-checklist</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-08-incident-response-incident-preparation-checklist</guid><description><![CDATA[<p>category: Incident Response</p><p>date: Wed, 29 Jul 2020 14:09:21 -0400</p><p>display_text: RMH Chapter 08 Incident Response - Incident Preparation Checklist</p><p>oit_type: guidelines_tools</p><p>title: RMH Chapter 08 Incident Response - Incident Preparation Checklist</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 08 Incident Response - Tabletop Exercise Template</title><pubDate>Wed, 29 Jul 2020 14:06:27 -0400</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-08-incident-response-tabletop-exercise-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-08-incident-response-tabletop-exercise-template</guid><description><![CDATA[<p>category: Incident Response</p><p>date: Wed, 29 Jul 2020 14:06:11 -0400</p><p>display_text: RMH Chapter 08 Incident Response - Tabletop Exercise Template</p><p>oit_type: form_templates</p><p>title: RMH Chapter 08 Incident Response - Tabletop Exercise Template</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 16 System and Communications Protection</title><pubDate>Wed, 15 Jul 2020 12:48:41 -0400</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-16-system-and-communications-protection</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-16-system-and-communications-protection</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Fri, 10 Jul 2020 12:51:06 -0400</p><p>display_text: RMH Chapter 16 System and Communications Protection</p><p>oit_type: procedure</p><p>title: RMH Chapter 16 System and Communications Protection</p><p>version_number: 1.0</p>]]></description></item><item><title>Key Enterprise System Security Lifecycle (KESSeL) Artifacts</title><pubDate>Thu, 18 Jun 2020 13:29:41 -0400</pubDate><link>https://www.cms.gov//research-statistics-data-and-systemscms-information-technologyinformationsecurityinformation/key-enterprise-system-security-lifecycle-kessel-artifacts</link><guid>https://www.cms.gov//research-statistics-data-and-systemscms-information-technologyinformationsecurityinformation/key-enterprise-system-security-lifecycle-kessel-artifacts</guid><description><![CDATA[<p>category: ATO Process </p><p>date: Thu, 18 Jun 2020 13:31:04 -0400</p><p>display_text: Key Enterprise System Security Lifecycle (KESSeL) Artifacts</p><p>oit_type: guidelines_tools</p><p>title: Key Enterprise System Security Lifecycle (KESSeL) Artifacts</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 09 Maintenance</title><pubDate>Tue, 07 Apr 2020 14:35:24 -0400</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-09-maintenance</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-09-maintenance</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 07 Apr 2020 14:30:00 -0400</p><p>display_text: RMH Chapter 09 Maintenance</p><p>oit_type: procedure</p><p>title: RMH Chapter 09 Maintenance</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 15 System and Services Acquisition </title><pubDate>Tue, 07 Apr 2020 14:31:58 -0400</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-15-system-and-services-acquisition</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/information/rmh-chapter-15-system-and-services-acquisition</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 07 Apr 2020 14:30:00 -0400</p><p>display_text: RMH Chapter 15 System and Services Acquisition </p><p>oit_type: procedure</p><p>title: RMH Chapter 15 System and Services Acquisition</p><p>version_number: 1.0</p>]]></description></item><item><title>2021 Cybersecurity Privacy Training Catalog</title><pubDate>Tue, 10 Mar 2020 15:02:47 -0400</pubDate><link>https://www.cms.gov//research-statistics-data-and-systemscms-information-technologyinformationsecurityinformation/2021-cybersecurity-privacy-training-catalog</link><guid>https://www.cms.gov//research-statistics-data-and-systemscms-information-technologyinformationsecurityinformation/2021-cybersecurity-privacy-training-catalog</guid><description><![CDATA[<p>category: Training</p><p>date: Fri, 14 Feb 2020 17:00:00 -0500</p><p>display_text: 2021 Cybersecurity Privacy Training Catalog</p><p>oit_type: guidelines_tools</p><p>title: 2021 Cybersecurity Privacy Training Catalog</p><p>version_number: 1.0</p>]]></description></item><item><title>CMS Information Security Contract Clause / Provision (Legacy)</title><pubDate>Wed, 18 Dec 2019 14:49:16 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-information-security-contract-clause-provision</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-information-security-contract-clause-provision</guid><description><![CDATA[<p>category: Contracts</p><p>date: Tue, 09 Apr 2013 12:00:00 -0400</p><p>display_text: CMS Information Security Contract Clause / Provision (Legacy)</p><p>oit_type: policy</p><p>title: CMS Information Security Contract Clause / Provision (Legacy)</p><p>version_number:  1.0</p>]]></description></item><item><title>RMH Chapter 13 Personnel Security</title><pubDate>Wed, 13 Nov 2019 21:24:42 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-13-personnel-security</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-13-personnel-security</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 12 Nov 2019 12:00:00 -0500</p><p>display_text: RMH Chapter 13 Personnel Security</p><p>oit_type: procedure</p><p>title: RMH Chapter 13 Personnel Security</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 11 Physical and Environmental Protection</title><pubDate>Mon, 04 Nov 2019 02:48:27 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-11-physical-and-environmental-protection</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-11-physical-and-environmental-protection</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 23 Mar 2021 12:00:00 -0400</p><p>display_text: RMH Chapter 11 Physical and Environmental Protection</p><p>oit_type: procedure</p><p>title: RMH Chapter 11 Physical and Environmental Protection</p><p>version_number: 1.1</p>]]></description></item><item><title>CMS Security and Privacy Language for Procurements</title><pubDate>Mon, 04 Nov 2019 02:48:25 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-security-and-privacy-language-for-procurements</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-security-and-privacy-language-for-procurements</guid><description><![CDATA[<p>category: Contracts</p><p>date: Thu, 02 May 2024 11:00:00 -0400</p><p>display_text: CMS Security and Privacy Language for Procurements</p><p>oit_type: policy</p><p>title: CMS Security and Privacy Language for Procurements</p><p>version_number: 3</p>]]></description></item><item><title>RMH Chapter 10 Media Protection</title><pubDate>Mon, 04 Nov 2019 02:48:11 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-10-media-protection</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-10-media-protection</guid><description><![CDATA[<p>date: Tue, 06 Aug 2019 12:00:00 -0400</p><p>display_text: RMH Chapter 10 Media Protection</p><p>oit_type: procedure</p><p>title: RMH Chapter 10 Media Protection</p><p>version_number: 1.0</p>]]></description></item><item><title>CMS Vulnerability Disclosure Policy</title><pubDate>Mon, 04 Nov 2019 02:48:10 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-vulnerability-disclosure-policy</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-vulnerability-disclosure-policy</guid><description><![CDATA[<p>date: Wed, 24 Apr 2019 16:00:00 -0400</p><p>display_text: CMS Vulnerability Disclosure Policy</p><p>oit_type: policy</p><p>title: CMS Vulnerability Disclosure Policy</p><p>version_number: 1.0</p>]]></description></item><item><title>CMS Privacy Impact Assessment SOP</title><pubDate>Mon, 04 Nov 2019 02:48:07 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-privacy-impact-assessment-sop</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-privacy-impact-assessment-sop</guid><description><![CDATA[<p>category: Privacy</p><p>date: Thu, 08 Aug 2019 12:00:00 -0400</p><p>display_text: CMS Privacy Impact Assessment SOP</p><p>oit_type: procedure</p><p>title: CMS Privacy Impact Assessment (PIA) Standard Operating Procedures (SOP)</p><p>version_number: 1.0</p>]]></description></item><item><title>IS2P2 2.0 Updates</title><pubDate>Mon, 04 Nov 2019 02:48:04 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/is2p2-20-updates</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/is2p2-20-updates</guid><description><![CDATA[]]></description></item><item><title>Business Impact Analysis (BIA) Process and Template</title><pubDate>Mon, 04 Nov 2019 02:47:43 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/business-impact-analysis-bia-process-and-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/business-impact-analysis-bia-process-and-template</guid><description><![CDATA[<p>category: Contingency Planning</p><p>date: Tue, 16 Feb 2021 13:00:00 -0500</p><p>display_text: Business Impact Analysis (BIA) Process and Template</p><p>oit_type: form_templates</p><p>title: Business Impact Analysis (BIA) Process and Template</p><p>version_number: 2.0</p>]]></description></item><item><title>RMH Chapter 6 Supplemental Contingency Planning Exercise Procedures</title><pubDate>Mon, 04 Nov 2019 02:47:30 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-6-supplemental-contingency-planning-exercise-procedures</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-6-supplemental-contingency-planning-exercise-procedures</guid><description><![CDATA[<p>category: Contingency Planning</p><p>date: Fri, 12 Apr 2019 12:00:00 -0400</p><p>display_text: RMH Chapter 6 Supplemental Contingency Planning Exercise Procedures</p><p>oit_type: guidelines_tools</p><p>title: RMH Chapter 6 Supplemental Contingency Planning Exercise Procedures</p><p>version_number: 1.1</p>]]></description></item><item><title>RMH Chapter 2 Awareness and Training</title><pubDate>Mon, 04 Nov 2019 02:47:21 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-2-awareness-and-training</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-2-awareness-and-training</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Wed, 27 Feb 2019 12:00:00 -0500</p><p>display_text: RMH Chapter 2 Awareness and Training</p><p>oit_type: procedure</p><p>title: RMH Chapter 2 Awareness and Training</p><p>version_number: 1.0</p>]]></description></item><item><title>NIST Information System Contingency Plan Template</title><pubDate>Mon, 04 Nov 2019 02:47:14 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/nist-information-system-contingency-plan-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/nist-information-system-contingency-plan-template</guid><description><![CDATA[]]></description></item><item><title>DevSecOps Checklist</title><pubDate>Mon, 04 Nov 2019 02:47:10 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/devsecops-checklist</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/devsecops-checklist</guid><description><![CDATA[<p>category: System Development</p><p>date: Tue, 20 Apr 2021 11:00:00 -0400</p><p>display_text: DevSecOps Checklist</p><p>oit_type: guidelines_tools</p><p>title: DevSecOps Checklist</p><p>version_number: 20200702</p>]]></description></item><item><title>RMH Chapter 6 Contingency Planning</title><pubDate>Mon, 04 Nov 2019 02:47:09 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-6-contingency-planning</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-6-contingency-planning</guid><description><![CDATA[<p>category: Risk Management Handbook (RMH)</p><p>date: Tue, 25 May 2021 11:00:00 -0400</p><p>display_text: RMH Chapter 6 Contingency Planning</p><p>oit_type: procedure</p><p>title: RMH Chapter 6 Contingency Planning</p><p>version_number: 1.4</p>]]></description></item><item><title>HHS Rules of Behavior for Use of HHS Information and IT Resources Policy</title><pubDate>Mon, 04 Nov 2019 02:47:08 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-rules-of-behavior-for-use-of-hhs-information-and-it-resources-policy</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-rules-of-behavior-for-use-of-hhs-information-and-it-resources-policy</guid><description><![CDATA[<p>category: Policy</p><p>date: Fri, 14 Feb 2020 12:00:00 -0500</p><p>display_text: HHS Rules of Behavior for Use of HHS Information and IT Resources Policy</p><p>oit_type: policy</p><p>title: HHS Rules of Behavior for Use of HHS Information and IT Resources Policy</p><p>version_number: 2.2</p>]]></description></item><item><title>CMS Privacy Handbook</title><pubDate>Mon, 04 Nov 2019 02:47:04 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-privacy-handbook</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-privacy-handbook</guid><description><![CDATA[<p>category: Privacy</p><p>date: Thu, 12 May 2022 11:00:00 -0400</p><p>display_text: CMS Privacy Handbook</p><p>oit_type: guidelines_tools</p><p>title: CMS Privacy Handbook</p><p>version_number: 2.0</p>]]></description></item><item><title>ARS 3.1 FAQ</title><pubDate>Mon, 04 Nov 2019 02:46:58 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-31-faq</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-31-faq</guid><description><![CDATA[<p>date: Tue, 23 Mar 2021 11:00:00 -0400</p><p>display_text: ARS 3.1 FAQ</p><p>oit_type: guidelines_tools</p><p>title: ARS 3.1 FAQ</p><p>version_number: 1.1</p>]]></description></item><item><title>RMH Chapter 4 Security Assessment and Authorization</title><pubDate>Mon, 04 Nov 2019 02:46:58 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-4-security-assessment-and-authorization</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-4-security-assessment-and-authorization</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Mon, 07 Dec 2020 12:00:00 -0500</p><p>display_text: RMH Chapter 4 Security Assessment and Authorization</p><p>oit_type: procedure</p><p>title: RMH Chapter 4 Security Assessment and Authorization</p><p>version_number: 1.1</p>]]></description></item><item><title>CMS Penetration Testing Rules of Engagement Template</title><pubDate>Mon, 04 Nov 2019 02:46:57 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-penetration-testing-rules-of-engagement-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-penetration-testing-rules-of-engagement-template</guid><description><![CDATA[<p>category: Risk Assessment</p><p>date: Wed, 09 Jan 2019 12:00:00 -0500</p><p>display_text: CMS Penetration Testing Rules of Engagement Template</p><p>oit_type: form_templates</p><p>title: CMS Penetration Testing Rules of Engagement Template</p><p>version_number: 1.0</p>]]></description></item><item><title>CMS Data Agreement Guidance</title><pubDate>Mon, 04 Nov 2019 02:46:57 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-data-agreement-guidance</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-data-agreement-guidance</guid><description><![CDATA[<p>date: Wed, 09 Jan 2019 12:00:00 -0500</p><p>display_text: CMS Data Agreement Guidance</p><p>oit_type: guidelines_tools</p><p>title: CMS Data Agreement Guidance</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 19 Privacy</title><pubDate>Mon, 04 Nov 2019 02:46:35 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-19-privacy</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-19-privacy</guid><description><![CDATA[<p>oit_type: procedure</p><p>title: RMH Chapter 19 Privacy</p><p>version_number: 1.0</p>]]></description></item><item><title>HHS PIA and PTA Writers' Handbook</title><pubDate>Mon, 04 Nov 2019 02:46:25 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-pia-and-pta-writers-handbook</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-pia-and-pta-writers-handbook</guid><description><![CDATA[<p>category: Privacy</p><p>date: Wed, 10 Oct 2018 12:00:00 -0400</p><p>display_text: HHS PIA and PTA Writers' Handbook</p><p>oit_type: procedure</p><p>title: HHS PIA and PTA Writers' Handbook</p><p>version_number: 2.0</p>]]></description></item><item><title>RMH Chapter 14 Risk Assessment</title><pubDate>Mon, 04 Nov 2019 02:46:24 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-14-risk-assessment</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-14-risk-assessment</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 13 Apr 2021 11:00:00 -0400</p><p>display_text: RMH Chapter 14 Risk Assessment</p><p>oit_type: procedure</p><p>title: RMH Chapter 14 Risk Assessment	</p><p>version_number: 1.3</p>]]></description></item><item><title>CISO Memorandum 18-01 - AC-2 Account Management</title><pubDate>Mon, 04 Nov 2019 02:46:08 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ciso-memorandum-18-01-ac-2-account-management</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ciso-memorandum-18-01-ac-2-account-management</guid><description><![CDATA[]]></description></item><item><title>Security Impact Analysis Template and One Pager</title><pubDate>Mon, 04 Nov 2019 02:45:08 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/security-impact-analysis-checklist-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/security-impact-analysis-checklist-template</guid><description><![CDATA[<p>category: Configuration Management</p><p>date: Tue, 04 Feb 2020 12:00:00 -0500</p><p>display_text: Security Impact Analysis Template and One Pager</p><p>oit_type: guidelines_tools</p><p>title: Security Impact Analysis Template and One Pager</p><p>version_number: 1.0</p>]]></description></item><item><title>ARS 3.1 Excel Export</title><pubDate>Mon, 04 Nov 2019 02:44:35 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-31-excel-export</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-31-excel-export</guid><description><![CDATA[<p>category: ARS</p><p>date: Fri, 19 Jan 2018 12:00:00 -0500</p><p>display_text: ARS 3.1 Excel Export</p><p>oit_type: guidelines_tools</p><p>title: ARS 3.1 Excel Export</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Chapter 05 Configuration Management</title><pubDate>Mon, 04 Nov 2019 02:44:33 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-05-configuration-management</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-05-configuration-management</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 23 Mar 2021 11:00:00 -0400</p><p>display_text: RMH Chapter 05 Configuration Management</p><p>oit_type: procedure</p><p>title: RMH Chapter 05 Configuration Management</p><p>version_number: 1.3</p>]]></description></item><item><title>CMS Required Control Baselines Quick Reference Guide (QRG)</title><pubDate>Mon, 04 Nov 2019 02:44:20 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-required-control-baselines-quick-reference-guide-qrg</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-required-control-baselines-quick-reference-guide-qrg</guid><description><![CDATA[<p>category: ARS</p><p>date: Tue, 05 Dec 2017 12:00:00 -0500</p><p>display_text: CMS Required Control Baselines Quick Reference Guide (QRG)</p><p>oit_type: guidelines_tools</p><p>title: CMS Required Control Baselines Quick Reference Guide (QRG)</p><p>version_number: 1.1</p>]]></description></item><item><title>ARS 3.1 Publication</title><pubDate>Mon, 04 Nov 2019 02:44:17 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-31-publication</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-31-publication</guid><description><![CDATA[<p>category: ARS</p><p>date: Mon, 29 Mar 2021 11:00:00 -0400</p><p>display_text: ARS 3.1 Publication</p><p>oit_type: standard</p><p>title: ARS 3.1 Publication</p><p>version_number: 3.1</p>]]></description></item><item><title>RMH Chapter 08 Incident Response - Incident Report Template</title><pubDate>Mon, 04 Nov 2019 02:43:28 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-08-incident-response-appendix-k-incident-report-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-08-incident-response-appendix-k-incident-report-template</guid><description><![CDATA[<p>category: Incident Response</p><p>date: Mon, 19 Jul 2021 12:00:00 -0400</p><p>display_text: RMH Chapter 08 Incident Response - Incident Report Template</p><p>oit_type: form_templates</p><p>title: RMH Chapter 08 Incident Response - Incident Report Template</p><p>version_number: 1.0</p>]]></description></item><item><title>ISPG Training Catalog</title><pubDate>Mon, 04 Nov 2019 02:43:15 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ispg-training-catalog</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ispg-training-catalog</guid><description><![CDATA[<p>category: Training and Awareness</p><p>date: Mon, 06 Feb 2023 12:00:00 -0500</p><p>display_text: ISPG Training Catalog</p><p>oit_type: training</p><p>title: ISPG Training Catalog</p><p>version_number: 2023</p>]]></description></item><item><title>ARS 3.0 High Differential Analysis</title><pubDate>Mon, 04 Nov 2019 02:42:59 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-30-high-differential-analysis</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-30-high-differential-analysis</guid><description><![CDATA[<p>category: ARS</p><p>date: Wed, 26 Apr 2017 12:00:00 -0400</p><p>display_text: ARS 3.0 High Differential Analysis</p><p>oit_type: guidelines_tools</p><p>title: ARS 3.0 High Differential Analysis</p><p>version_number: 1.2</p>]]></description></item><item><title>ARS 3.0 Low Differential Analysis</title><pubDate>Mon, 04 Nov 2019 02:42:59 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-30-low-differential-analysis</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-30-low-differential-analysis</guid><description><![CDATA[<p>category: ARS</p><p>date: Wed, 26 Apr 2017 12:00:00 -0400</p><p>display_text: ARS 3.0 Low Differential Analysis</p><p>oit_type: guidelines_tools</p><p>title: ARS 3.0 Low Differential Analysis</p><p>version_number: 1.1</p>]]></description></item><item><title>ARS 3.0 Moderate Differential Analysis</title><pubDate>Mon, 04 Nov 2019 02:42:56 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-30-moderate-differential-analysis</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ars-30-moderate-differential-analysis</guid><description><![CDATA[<p>category: ARS</p><p>date: Wed, 26 Apr 2017 12:00:00 -0400</p><p>display_text: ARS 3.0 Moderate Differential Analysis</p><p>oit_type: guidelines_tools</p><p>title: ARS 3.0 Moderate Differential Analysis</p><p>version_number: 1.3</p>]]></description></item><item><title>Warning Banner</title><pubDate>Mon, 04 Nov 2019 02:42:48 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/warning-banner</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/warning-banner</guid><description><![CDATA[]]></description></item><item><title>RMH Chapter 12 Security and Privacy Planning</title><pubDate>Mon, 04 Nov 2019 02:42:36 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-12-security-and-privacy-planning</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-12-security-and-privacy-planning</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Wed, 17 Mar 2021 12:00:00 -0400</p><p>display_text: RMH Chapter 12 Security and Privacy Planning</p><p>oit_type: procedure</p><p>title: RMH Chapter 12 Security and Privacy Planning</p><p>version_number: 2.1</p>]]></description></item><item><title>RMH Chapter 08 Incident Response</title><pubDate>Mon, 04 Nov 2019 02:42:36 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-08-incident-response</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-chapter-08-incident-response</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Tue, 23 Mar 2021 12:00:00 -0400</p><p>display_text: RMH Chapter 08 Incident Response</p><p>oit_type: procedure</p><p>title: RMH Chapter 08 Incident Response</p><p>version_number: 2.1</p>]]></description></item><item><title>HHS Standard for Encryption of Computing Devices and Information</title><pubDate>Mon, 04 Nov 2019 02:42:35 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-standard-for-encryption-of-computing-devices-and-information</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-standard-for-encryption-of-computing-devices-and-information</guid><description><![CDATA[<p>category: Department Guidance</p><p>date: Wed, 14 Dec 2016 17:00:00 -0500</p><p>display_text: HHS Standard for Encryption of Computing Devices and Information</p><p>oit_type: standard</p><p>title: HHS Standard for Encryption of Computing Devices and Information</p><p>version_number: 2</p>]]></description></item><item><title>Use of Government Furnished Equipment (GFE) During Foreign Travel</title><pubDate>Mon, 04 Nov 2019 02:42:35 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/use-of-government-furnished-equipment-gfe-during-foreign-travel</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/use-of-government-furnished-equipment-gfe-during-foreign-travel</guid><description><![CDATA[<p>category: Department Guidance</p><p>date: Thu, 27 Dec 2018 17:00:00 -0500</p><p>display_text: Use of Government Furnished Equipment (GFE) During Foreign Travel</p><p>oit_type: memorandum</p><p>title: Use of Government Furnished Equipment (GFE) During Foreign Travel</p><p>version_number: As Amended</p>]]></description></item><item><title>CIO Directive 16-02 CMS Security of Federal Tax Information</title><pubDate>Mon, 04 Nov 2019 02:41:18 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cio-directive-16-02-cms-security-of-federal-tax-information</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cio-directive-16-02-cms-security-of-federal-tax-information</guid><description><![CDATA[<p>category: CIO Directive</p><p>date: Thu, 02 Jun 2016 12:00:00 -0400</p><p>display_text: CIO Directive 16-02 CMS Security of Federal Tax Information</p><p>oit_type: policy</p><p>title: CIO Directive 16-02 CMS Security of Federal Tax Information</p><p>version_number: 1.0</p>]]></description></item><item><title>CMS Information Systems Security and Privacy Policy (IS2P2)</title><pubDate>Mon, 04 Nov 2019 02:41:16 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-information-systems-security-and-privacy-policy-is2p2</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-information-systems-security-and-privacy-policy-is2p2</guid><description><![CDATA[<p>date: Thu, 16 Jun 2022 12:00:00 -0400</p><p>display_text: CMS Information Systems Security and Privacy Policy (IS2P2)</p><p>oit_type: policy</p><p>title: CMS Information Systems Security and Privacy Policy (IS2P2)</p><p>version_number: 3.0</p>]]></description></item><item><title>HHS End of Life Operating Systems, Software, and Applications Policy, Updated</title><pubDate>Mon, 04 Nov 2019 02:40:04 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-end-of-life-operating-systems-software-and-applications-policy-updated</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-end-of-life-operating-systems-software-and-applications-policy-updated</guid><description><![CDATA[<p>category: System Development</p><p>date: Thu, 19 May 2016 16:00:00 -0400</p><p>display_text: HHS End of Life Operating Systems, Software, and Applications Policy, Updated</p><p>oit_type: policy</p><p>title: HHS End of Life Operating Systems, Software, and Applications Policy, Updated</p><p>version_number: 2</p>]]></description></item><item><title>HHS Department Waiver/Risk-Based Decision Form</title><pubDate>Mon, 04 Nov 2019 02:39:19 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-department-waiver-risk-based-decision-form</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/hhs-department-waiver-risk-based-decision-form</guid><description><![CDATA[<p>category: Policy</p><p>date: Wed, 10 Jul 2019 16:00:00 -0400</p><p>display_text: HHS Department Waiver/Risk-Based Decision Form</p><p>oit_type: form_templates</p><p>title: HHS Department Waiver/Risk-Based Decision Form</p><p>version_number: 2</p>]]></description></item><item><title>CISO Memorandum 14-02 ? CMS Cloud Computing and Federal Risk and Authorization Management Program Guidance</title><pubDate>Mon, 04 Nov 2019 02:37:54 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ciso-memorandum-14-02-%253f-cms-cloud-computing-and-federal-risk-and-authorization-management-program-guidance</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/ciso-memorandum-14-02-%253f-cms-cloud-computing-and-federal-risk-and-authorization-management-program-guidance</guid><description><![CDATA[]]></description></item><item><title>RMH Vol II Procedure 3-3 Common Control Identification</title><pubDate>Mon, 04 Nov 2019 02:37:53 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-ii-procedure-3-3-common-control-identification</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-ii-procedure-3-3-common-control-identification</guid><description><![CDATA[<p>category: Risk Management Handbook</p><p>date: Wed, 25 Jun 2014 12:00:00 -0400</p><p>display_text: RMH Vol II Procedure 3-3 Common Control Identification</p><p>oit_type: procedure</p><p>title: RMH Vol II Procedure 3-3 Common Control Identification</p><p>version_number: 1.0</p>]]></description></item><item><title>RMH Vol III Standard 4-3 Non-Standard Account Authenticator Management</title><pubDate>Mon, 04 Nov 2019 02:36:44 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-iii-standard-4-3-non-standard-account-authenticator-management</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-iii-standard-4-3-non-standard-account-authenticator-management</guid><description><![CDATA[<p>category: Authentication</p><p>date: Wed, 30 Oct 2013 12:00:00 -0400</p><p>display_text: RMH Vol III Standard 4-3 Non-Standard Account Authenticator Management</p><p>oit_type: standard</p><p>title: RMH Vol III Standard 4-3 Non-Standard Account Authenticator Management</p><p>version_number: 1.0</p>]]></description></item><item><title>Tool System Categorization Worksheet</title><pubDate>Mon, 04 Nov 2019 02:31:54 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/tool-system-categorization-worksheet</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/tool-system-categorization-worksheet</guid><description><![CDATA[<p>category: Security Planning</p><p>date: Tue, 19 Jan 2021 13:00:00 -0500</p><p>display_text: Tool: System Categorization Worksheet</p><p>oit_type: guidelines_tools</p><p>title: Tool: System Categorization Worksheet</p><p>version_number: 1.2</p>]]></description></item><item><title>CMS Information Security Risk Acceptance Template</title><pubDate>Mon, 04 Nov 2019 02:31:50 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-information-security-risk-acceptance-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-information-security-risk-acceptance-template</guid><description><![CDATA[]]></description></item><item><title>RMH Vol I Chapter 10 CMS Risk Management Terms, Definitions, and Acronyms</title><pubDate>Mon, 04 Nov 2019 02:31:50 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-i-chapter-10-cms-risk-management-terms-definitions-and-acronyms</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-i-chapter-10-cms-risk-management-terms-definitions-and-acronyms</guid><description><![CDATA[<p>category: Reference</p><p>date: Fri, 13 Jul 2012 12:00:00 -0400</p><p>display_text: RMH Vol I Chapter 10 CMS Risk Management Terms, Definitions, and Acronyms</p><p>oit_type: procedure</p><p>title: RMH Vol I Chapter 10 CMS Risk Management Terms, Definitions, and Acronyms</p><p>version_number: 1</p>]]></description></item><item><title>Interconnection Security Agreement (ISA) Template</title><pubDate>Mon, 04 Nov 2019 02:13:58 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/interconnection-security-agreement-isa-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/interconnection-security-agreement-isa-template</guid><description><![CDATA[<p>category: Agreement</p><p>date: Wed, 09 Jan 2019 12:00:00 -0500</p><p>display_text: Interconnection Security Agreement (ISA)Template</p><p>oit_type: form_templates</p><p>title: Interconnection Security Agreement (ISA)Template</p><p>version_number: 1.3</p>]]></description></item><item><title>CMS System ATO Request Form</title><pubDate>Mon, 04 Nov 2019 02:13:42 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-system-ato-request-form</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms-system-ato-request-form</guid><description><![CDATA[<p>category: Security Assessment and Authorization</p><p>date: Thu, 08 Apr 2021 11:00:00 -0400</p><p>display_text: CMS System ATO Request Form</p><p>oit_type: form_templates</p><p>title: CMS System ATO Request Form</p><p>version_number: 4.3</p>]]></description></item><item><title>Information System Risk Assessment Template</title><pubDate>Mon, 04 Nov 2019 02:13:42 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/information-system-risk-assessment-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/information-system-risk-assessment-template</guid><description><![CDATA[<p>category: Risk Assessment</p><p>date: Fri, 19 Oct 2018 12:00:00 -0400</p><p>display_text: Information System Risk Assessment Template</p><p>oit_type: form_templates</p><p>title: Information System Risk Assessment Template</p><p>version_number: 4.1</p>]]></description></item><item><title>Security Assessment Report Template</title><pubDate>Mon, 04 Nov 2019 02:13:41 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/security-assessment-report-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/security-assessment-report-template</guid><description><![CDATA[<p>category: Security Assessment and Authorization</p><p>date: Wed, 09 Jan 2019 12:00:00 -0500</p><p>display_text: Security Assessment Report Template</p><p>oit_type: form_templates</p><p>title: Security Assessment Report Template</p><p>version_number: 2.0</p>]]></description></item><item><title>CMS1223299</title><pubDate>Mon, 04 Nov 2019 02:13:41 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1223299</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1223299</guid><description><![CDATA[<p>category: Security Assessment and Authorization</p><p>date: Thu, 18 Jun 2020 12:00:00 -0400</p><p>display_text: ISSO Guide and Appointment Letter</p><p>oit_type: form_templates</p><p>title: ISSO Guide and Appointment Letter</p><p>version_number: 1.0</p>]]></description></item><item><title>Business Partner System Security Manual (BPSSM)</title><pubDate>Mon, 04 Nov 2019 02:13:40 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1223332</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1223332</guid><description><![CDATA[<p>category: Agreement</p><p>date: Fri, 15 Jun 2018 16:00:00 -0400</p><p>display_text: Business Partner System Security Manual (BPSSM)</p><p>oit_type: policy</p><p>title: Business Partner System Security Manual (BPSSM)</p><p>version_number: 14</p>]]></description></item><item><title>Security Assessment Plan Template</title><pubDate>Mon, 04 Nov 2019 02:13:40 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/security-assessment-plan-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/security-assessment-plan-template</guid><description><![CDATA[<p>category: Security Assessment and Authorization</p><p>date: Wed, 09 Jan 2019 12:00:00 -0500</p><p>display_text: Security Assessment Plan Template</p><p>oit_type: form_templates</p><p>title: Security Assessment Plan Template</p><p>version_number: 3.0</p>]]></description></item><item><title>CMS1247153</title><pubDate>Mon, 04 Nov 2019 02:13:40 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1247153</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1247153</guid><description><![CDATA[<p>category: Authentication</p><p>date: Thu, 17 Apr 2014 12:00:00 -0400</p><p>display_text: RMH Vol III Standard 3-1 Authentication</p><p>oit_type: standard</p><p>title: RMH Vol III Standard 3-1 Authentication</p><p>version_number: 1.3</p>]]></description></item><item><title>RMH Vol III Standard 3-2 Cloud Computing</title><pubDate>Mon, 04 Nov 2019 02:13:40 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-iii-standard-3-2-cloud-computing</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/rmh-vol-iii-standard-3-2-cloud-computing</guid><description><![CDATA[<p>category: Cloud Services</p><p>date: Tue, 03 May 2011 12:00:00 -0400</p><p>display_text: RMH Vol III Standard 3-2 Cloud Computing </p><p>oit_type: standard</p><p>title: RMH Vol III Standard 3-2 Cloud Computing</p><p>version_number: 1.0</p>]]></description></item><item><title>System Retirement Memo Template</title><pubDate>Mon, 04 Nov 2019 02:13:38 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1254867</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/cms1254867</guid><description><![CDATA[<p>category: ATO Process</p><p>date: Thu, 13 Oct 2022 11:00:00 -0400</p><p>display_text: System Retirement Memo Template</p><p>oit_type: guidelines_tools</p><p>title: System Retirement Memo Template</p><p>version_number: 2.2</p>]]></description></item><item><title>Memorandum of Understanding (MOU) Template</title><pubDate>Mon, 04 Nov 2019 02:13:38 -0500</pubDate><link>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/memorandum-of-understanding-mou-template</link><guid>https://www.cms.gov//research-statistics-data-and-systems/cms-information-technology/informationsecurity/info-security-library-items/memorandum-of-understanding-mou-template</guid><description><![CDATA[<p>category: Agreement</p><p>date: Wed, 09 Jan 2019 12:00:00 -0500</p><p>display_text: Memorandum of Understanding (MOU) Template</p><p>oit_type: form_templates</p><p>title: Memorandum of Understanding (MOU) Template</p><p>version_number: 1.2</p>]]></description></item></channel></rss>