Coordinate MARS-E compliance with adjacent federal programmes and audit regimes. IRS Publication 1075 (Safeguarding Federal Tax Information) compliance for Federal Tax Information (FTI) processing under IRC Section 6103 + Safeguard Procedures Report (SPR) every 6 years + Safeguard Activity Report (SAFER) annually + IRS Safeguard Review (on-site) every 3 years + IRS Office of Safeguards coordination. FedRAMP Moderate Baseline for cloud-hosted Exchange components + Joint Authorization Board (JAB) Provisional ATO or Agency-issued ATO + continuous monitoring through FedRAMP Continuous Monitoring + annual 3PAO assessment + monthly POAM updates. CMS Acceptable Risk Safeguards (ARS) v3.1 / v5.0 alignment for parallel Medicare and Medicaid systems. CMS Cybersecurity and Risk Assessment Program (CRISP) integration. HHS OIG Office of Inspector General oversight authority + GAO Government Accountability Office audit cooperation. Joint MARS-E + IRS Pub 1075 + HIPAA + FedRAMP audit coordination to reduce duplication. SBM-to-FFM data exchange agreements + Data Sharing Agreements (DSAs) + Computer Matching Agreements (CMAs) under Privacy Act of 1974. State Medicaid + CHIP coordination via CMS-state Memoranda of Understanding (MOUs). State Attorney General notification for state-specific breach laws. CMS quarterly status reporting + annual ATO recertification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.