C3PO: CMS Comprehensive Cybersecurity and Privacy Optimization

Overview

Development stage

PilotSource: b) Pilot – The use case has been deployed in a limited test or pilot capacity.

High-impact designation

Not high-impactSource: c) Not high-impact

Impact justification

Not reported

Start date

2024-10 (month precision)Source: Oct-24

Withheld from public reporting

NoSource: a) No

Mission

Topic area

Information Technology

Operational functions

Cyber threat detection Derived by keyword rules; see methodology

Problem the AI is intended to solve

Reduce the burden of reviewing lengthy OMB, NIST and HHS policy documents, quicker review of SORN and PIAs

Expected benefits

Reducing the response time to new or emerging policies and technologies, the ability to adequately review privacy agreements in the event of incident

System outputs

Recommendations on policy updates, identification of privacy agreements and the associated systems.

Technology

AI classification

Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).

System name(s)

Not reported

Custom-developed code

No

Public source code

Not reported

Sourcing

How it was built

Contract and in-houseSource: c) Developed with both contracting and in-house resources

Vendor (as reported)

Connsci and OpenAI

Vendors (standardized)

OpenAI

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII

No

Privacy Impact Assessment

Not reported

Authorization to Operate

No

Demographic features

k) None of the above

Training and evaluation data

Publicly available OMB memos, NIST Guidance, CMS policies, CMS SORNs and PIAs

Federal Data Catalog

Not reported

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Potential impacts and how they were identified

Not reported