Workforce Security. 1.1.1. Data repositories containing Customers Data shall be maintained by Xxxxxx Authorized Personnel who have passed sufficient background investigations that revealed no occurrences of criminal convictions or fraud.
1.1.2. Bizagi implements adequate procedures for the clearance, authorization, supervision, training and termination of workforce members.
Workforce Security. 100 Union Membership
Workforce Security. The Company maintains Workforce security procedures to ensure that all Workforce members have appropriate Access to ePHI. These procedures also are intended to prevent those Workforce members who do not have appropriate Access to ePHI from obtaining such Access. As applicable:
Workforce Security. 3.3.1 Authorization and/or Supervision of Employees 12
3.3.2 Clearance Procedures 13 3.3.3 Termination Procedures 13 3.4 Information Access Management
3.4.1 Access Authorization 15 3.4.2 Access Establishment and Modification 15 3.5 Awareness and Training 3.5.1 Workforce Training Program 17 3.5.2 Security Reminders 18 3.5.3 Protection from Malicious Software 18 3.5.4 Log-in Monitoring (Addressable) 18 3.5.5 Password Management 18 3.6 Security Incident Procedures 19 3.7 Contingency Plan
3.7.1 Data Backup Plan 21 3.7.2 Disaster Recovery Plan 21 3.7.3 Testing and Revision Procedure 22 3.7.4 Applications and Data Criticality Analysis 22 3.8 Evaluation 24 Section 4 Physical Safeguards (PS)
Workforce Security. BUSINESS ASSOCIATE will implement policies and procedures to ensure that all members of its workforce have appropriate access to electronic PHI and to prevent those workforce members who do not have access from obtaining access to electronic PHI.
Workforce Security. Implement policies and procedures to ensure that Vendor workforce members have appropriate access to EPHI, and to prevent those workforce members without authorized access from obtaining it.
Workforce Security. Workforce Screening Supplier will perform a thorough background check that will include, at a minimum, criminal check, credit report, employment verification, drug testing, workers compensation report, name/address verification for all employees requiring access to information systems that transmit, transact or store Customer’s PII and/or PHI. Background checks will include married name and maiden name where appropriate. Termination Procedure Supplier will terminate access to information systems that transmit, transact or store Customer’s PII and/or PHI immediately upon termination of individual employment. Authorization and Supervision Supplier will: (i) ensure that workforce members have appropriate access to PII and/or PHI following the principles of Minimum Necessary and Least Privilege and (ii) prevent workforce members who do not have access to PII and/or PHI from obtaining access to PII and/or PHI. Access Authorization Supplier must implement policies and procedures for granting access to Customer’s PII and/or PHI. Supplier will provide secure role-based account management granting privileges utilizing the principle of least privilege. Supplier will monitor all user accounts with administrative level access to Operating Systems and databases transmitting, transacting or storing Customer’s PII and/or PHI. Supplier will restrict the ability to install software to only authorized technical support personnel. Access Establishment and Modification Supplier will implement policies and procedures to establish, document, review, and modify a user’s right to access systems that transmit, transact or store Customer’s PII and/or PHI.
Workforce Security
