Memo: 'Limitless' security risks for website

CBS is reporting that in preliminary testimony last week to the House Oversight Committee, chief project manager  said that he was unaware of a memo that said security problems with the site were "limitless" and that they wouldn't be fixed until the middle of 2014 or perhaps 2015. Henry Chao,'s chief project manager at the Centers for Medicare and Medicaid Services (CMS), gave nine hours of closed-door testimony to the House Oversight Committee in advance of this week's hearing. In excerpts CBS News has obtained, Chao was asked about a memo that outlined important security risks discovered in the insurance system. Chao said he was unaware of a Sept. 3 government memo written by another senior official at CMS. It found two high-risk issues, which are redacted for security reasons. The memo said "the threat and risk potential (to the system) is limitless." The memo shows CMS gave deadlines of mid-2014 and early 2015 to address them. But...(Read Full Post)