The IT system that holds federal employee health insurance claims records is not meeting various security monitoring requirements, a report has found.

The report advises CMS to set up more processes and procedures for security.

​The U.S. Department of Health and Human Services' oversight of privacy and cybersecurity regulations in the healthcare sector is deeply flawed, even as the agency is promoting the online digitization and storage of Americans' health records, according to congressional investigators.