ms. tavenner, 7.3 million subscribers, correct? then the hue and cry was we won't pay for it, pay for one month and won't pay any longer and it will fall on its face. that hasn't been the case either, has it? >> no, ma'am. >> the chairman of the committee and a number of republicans just sent you a letter and i want to read it out loud, one segment of it. "in order to enroll beneficiaries in the exchange, healthcare.gov collects, obtains and retains massive amounts of personally identifiable information about millions of americans. this information includes social security numbers, personal addresses, income and employment records and tax return records. it is extremely important that cms and the other federal agencies involved in the exchanges properly protect and maintain this sensitive information." now, i actually agree with that statement and i presume you agree with that statement? >> yes, i do. >> and having agreed with that statement, have you, to date, had any signer attacks that resulted in personally identifiable informa

ms. tavenner, 7.3 million r4d subscribers, correct?then the hue and cry was we won't pay for it, pay for one month and won't pay any longer and it will fall on its face. that hasn't been the case either, has it? >> no, ma'am. >> the chairman of the committee and a number of republicans just sent you a letter and i want to read it out loud, one segment of it. "in order to enroll beneficiaries in the exchange, healthcare.gov collects, obtains and retains massive amounts of personally identifiable information about millions of americans. this information includes social security numbers, personal addresses, income and employment records and tax return records. it is extremely important that cms and the other federal agencies involved in the exchanges properly protect and maintain this sensitive information." now, i actually agree with that statement and i presume you agree with that statement? >> yes, i do. >> and having agreed with that statement, have you, to date, had any signer attacks that resulted in personally identifiable informat

ms. tavenner, knowing that the upcoming november enrollment period is coming for millions of americans, who will be shopping on the exchanges, how prepared are you to take these 28 recommendations and others to assure protection? >> yes, ma'am. let me start with the 22 technical recommendations. 19 of those have been resolved or mitigated or will be further reviewed prior to open enrollment. so those will be handled. of the six other recommendations, we're in the process of either completing -- have completed those, or will complete those prior to open enrollment. >> and based on the 19 that you've identified, miss tavenner, and the remaining measures to implement, you are confident that not only are they implemented, but they're tested, and will have to the greatest degree -- i might disagree with some of my colleagues that we can do everything in our power, and those hostile, those negative, those who intend us harm and intend to access that information for their own gain will find ways to do that. i want to make sure that we're doing everything that we know that mitigates and prevents an