Entity makes all policies and procedures available to all staff members via the company employee portal
Entity requires that all staff members review and acknowledge company policies annually
Entity conducts risk assessment of suspected data breaches and any significant data breaches are notified to all affected parties without unreasonable delay
Entity has a documented Breach Notification Policy, and makes it available for all staff on the company employee portal
Entity ensures that all policy documents are retained for at least (6) years from creation
To help determine that only authorized changes are deployed, Entity’s key personnel are notified when changes are deployed to the production environment