Cisco Umbrella

Change-control processes and procedures are followed for all changes to system components.

Responding to Change-detection Alerts (11.5.1)

Vulnerability Scanning (11.2)

Access to client data requires a unique ID assigned to each user.

Logged alerts are reviewed and investigated as needed to identify, respond to, and mitigate suspicious or malicious activity.

AWS is configured for security logging, alerting and monitoring for potential threats.

GV.RR-02: Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced

GV.RR-03: Adequate resources are allocated commensurate with the cybersecurity risk strategy, roles, responsibilities, and policies

PR.DS-10: The confidentiality, integrity, and availability of data-in-use are protected

ePHI Protection 9 - Are there mechanisms in place to protect ePHI from unauthorized modification or deletion?

Security event reporting - Are there both policies and procedures that define a security event and provide instruction for communicating the event to appropriate personnel?

Protections 4 P & P - Are there processes in place to ensure that members of the public and staff without authorization cannot see ePHI (on computer screens, printers, desktops, etc)?

ePHI Access 2 - Does each user with access to ePHI and systems with ePHI access have a unique set of credentials for login?

Access Control 1 P & P - Are there both an Access Control policy and procedure to manage the authenticated and authorized access of people and systems to internal org resources?

ePHI Protection 1 - Is encryption enabled for confidential, private, and ePHI data as it is accessed within an EHR (in transit)?

ePHI Protection 7 - Does the organization (or its IT support) regularly evaluate information system configurations for security best practices?

ePHI Access 1 - Is there a mechanism to both control and log user access to systems that contain ePHI or contain or access an EHR?