Anthem Refuses US Gov Security Audit
Insurance provider Anthem has reportedly refused to let the US Office of Personnel Management’s Office of Inspector General (OIG) perform a full security audit of its systems, in the wake of a massive data breach that potentially affected 70 million Americans.
According to an anonymous spokesperson, the company first refused to allow the agency to perform "standard vulnerability scans and configuration compliance tests" both last summer and in 2013—so the refusals aren’t directly linked to the breach.
"What we had attempted to schedule for the summer of 2015 was a sort of 'partial audit' —what we call a 'limited scope audit'—that would have consisted only of the work we were prevented from conducting in 2013," the OIG spokeswoman said. "So this is the second time that Anthem has refused to permit us to perform our standard vulnerability scans and configuration compliance tests."
