Automate.io

Events and Incidents 1 - Does the organization or its IT MSP have procedures documented and implemented to detect, prevent, and respond to security incidents?

Business Continuity Plan 2 - Does the organization have a documented plan to receive, access, maintain, and record PHI in the event of a digital failure, and restore those records electronically after an incident has been recovered from?

Disaster Recovery Plan 1 - Does the organization have a Disaster Recovery Plan that outlines the steps needed to restore critical services and processes for business continuity in the case of a disastrous event?

Business Continuity Plan 1 - Does the organization have a Business Continuity Plan that identifies business critical services and data sets needed to continue patient/client service?

Events and Incidents 2 - Are the procedures to detect, prevent, and respond to security and IT events documented and available for analysis for a reasonable amount of time?

Outlines ICT governance roles for senior management.

Details structural organization to manage ICT risk.

Allows voluntary reports of cyber threats.

Utilize an Active Discovery Tool

Utilize Automated Software Inventory Tools

Deploy and Maintain Anti-Malware Software

How are IT systems monitored, maintained, and protected against potential failures? (IT Systems Failure)

How does the organization monitor and ensure compliance with relevant regulations? (Regulatory Compliance Failure)