The Lead works closely with CMS business owners, the CMS Office of Information Technology (OIT), the MAPD Business Operations Support Contractor (MBOSC), CMS help desks and incident response teams, and the partner systems MARx depends on, including SSA, RRB, HPMS, APPS, and the Common Medicare Environment shared with MEPBS. Make sure production vulnerabilities and findings are remediated within HHS POA&M timelines (critical 15 days, high 30 days, medium 90 days, low 360 days), and that items that can't meet those timelines are tracked in the POA&M.