Administrative Delegation #52

AUTHORITY DELEGATED

Pursuant to authority delegated to Operating Division Heads from the Chief Information Officer, Office of the Assistant Secretary for Administration, Department of Health and Human Services, "Information System Security and Privacy Policy," dated July 30, 2014, I hereby delegate to the positions listed below the authority for management of the Information Technology (IT) security program.  The Chief Information Officer or the Chief Information Security Officer is required to concur in every Indian Health Service (IHS) level IT security risk acceptance decision and exercise technical controls to isolate or disconnect any systems or devices not in compliance with minimum security standards.

TO WHOM DELEGATED

Chief Medical Officer
Chief Information Officer
Chief Information Security Officer

AUTHORITY TO REDELEGATE

This authority may not be redelegated.

SUPERSESSION

This delegation supersedes the previous delegation of authority located in Indian Health Manual Delegation of Authority, Administrative #52, dated July 25, 2014.

EFFECTIVE DATE

This delegation is effective upon date of signature.

Addressees:

Chief Medical Officer
Chief Information Officer
Chief Information Security Officer