On the recordOctober 29, 2013
This document indicates that CMS postponed a final security assessment screening, but in its place, CMS did put in place a number of mitigation measures, and it concluded that these measures would mitigate any security risk.
Source
congress.gov




