HIPAA

    Entity’s Senior Management or the Information Security Officer periodically reviews and ensures that access to the critical systems is restricted to only those individuals who require such access to perform their job functions
    profile_icon
    | Sep 08, 2023
    Entity appoints a Compliance Program Manager who is delegated the responsibility of planning and implementing the internal control environment
    profile_icon
    | Sep 08, 2023
    Entity appoints a People Operations Officer to develop and drive forward all HR security-related strategies across the company
    profile_icon
    | Sep 08, 2023
    Entity’s infrastructure is configured to generate audit events for actions of interest related to security for all critical systems
    profile_icon
    | Sep 08, 2023
    Entity has documented Business Continuity Policy, that establish guidelines and procedures on continuing business operations in case of a disruption or a security incident
    profile_icon
    | Sep 08, 2023
    Entity has documented Disaster Recovery Policy, that establish guidelines and procedures on continuing business operations in case of a disruption or a security incident
    profile_icon
    | Sep 08, 2023