Adverse Security Event definition
Examples of Adverse Security Event in a sentence
The notification should include sufficient information for Sponsoring Implementer to understand the nature of the Adverse Security Event and identify other Implementers or Carequality Connections that may be impacted by the Adverse Security Event.
As soon as reasonably practicable, but no later than five (5) business days after determining that an Adverse Security Event (or “Event”) has occurred and is likely to have an adverse impact on the Network or another Participant, Participant shall provide a notification to the Coordinating Committee and all Participants that are likely impacted by the Event.
The notification should include sufficient information for the recipient of the notification to understand the nature of the Adverse Security Event.
Compliance with this Section 14.04 shall not relieve Participants of any other security incident or Adverse Security Event reporting requirements under Applicable Law including, but not limited to, HIPAA or those related to consumers.
If, on the basis of the Notification, a Participant desires to stop Transacting Message Content with the Participant that reported an Adverse Security Event, it shall stop Transacting Message Content in accordance with Section 12.01(b) of this Agreement.
This Section 14.04 shall not be deemed to supersede a Participant’s obligations (if any) under relevant security incident, Adverse Security Event notification or confidentiality provisions of Applicable Law.
The Notification should include sufficient information for the Coordinating Committee to understand the nature of the Adverse Security Event.
Receiving reports of Adverse Security Events and acting upon such reports in accordance with Section 14.04 of this Agreement (Adverse Security Event Notification); f.
Adverse Security Event shall mean the unauthorized acquisition, access, disclosure, or use of unencrypted Message Content while in the process of being transacted in a manner permitted by this Agreement by anyone who is not a Participant or Participant User or by a Participant or Participant User in any manner that is not a Permitted Purpose under this Agreement.
The THSA shall maintain an active list of Participant contacts for Adverse Security Event Notification purposes.