Compliance Scorecard Policy PACKS

Our One year subscription consists of the following items:

• 10 Starter Policy Documents
• 2 Starter Standard operating procedures
• Upgrades based on framework changes
• Deployment to your Policy Scorecard library repository

Our Policy packs consist of the following starter documents:

1. Privacy Policy: Outlines how PHI is collected, used, disclosed, and safeguarded.
2. Security Policy: Specifies the safeguards in place to protect PHI from unauthorized access, use, or disclosure.
3. Risk Analysis and Management Policy: Describes how risks to PHI are identified and managed.
4. Breach Notification Policy: Specifies how breaches of PHI are reported and managed.
5. Contingency Planning Policy: Outlines how PHI is backed up, how PHI is accessed in emergency situations, and how systems are restored after an outage.
6. Employee Training and Awareness Policy: Outlines the training and awareness program for employees on HIPAA rules and regulations.
7. Business Associate Agreement Policy: Outlines the requirements and responsibilities for third-party vendors and contractors who handle PHI.
8. Access Controls Policy: Describes the controls in place to limit access to PHI to authorized individuals.
9. Incident Response Policy: Outlines how incidents involving PHI are detected, assessed, and managed.
10. Audit Controls Policy: Describes the auditing process to ensure compliance with HIPAA regulations.

Our One year subscription consists of the following items:

• 10 Starter Policy Documents
• 2 Starter Standard operating procedures
• Upgrades based on framework changes
• Deployment to your Policy Scorecard library repository

Our Policy packs consist of the following starter documents:

1. Written Information Security Policy (WISP) considering the following:
   • Access Control Policy and Procedures: Specifies controls for limiting access to systems and data.
   • Authentication and Authorization Policy and Procedures: Outlines how users are identified and authorized to access resources.
   • Change Management Policy and Procedures: Specifies how changes to systems and data are managed and controlled.
   • System Monitoring and Auditing Policy and Procedures: Describes how system activity is monitored and audited.
   • Privacy and Confidentiality Policy: Outlines how personal information is protected and used.
   • Security Risk Assessments Policy and Procedures: Describes how risks to personal information are identified and managed.
2. Acceptable Use Policy: Outlines acceptable use of company systems and data by employees.
3. Security Awareness Training Policy: Describes the requirements for employee security training and awareness.
4. Data Governance Policy and Procedures: Outlines how data is collected, stored, processed, and used.
5. Incident Response Plan: Outlines the steps to be taken in the event of a security incident or breach.

Our One year subscription consists of the following items:

• 22 Starter Policy Documents
• 6 Starter Standard operating procedures
• Upgrades based on framework changes
• Deployment to your Policy Scorecard library repository

Our Policy packs consist of the following starter documents:

1. Access Control Policy and Procedures: Specifies controls for limiting access to systems and data.
2. Acceptable Use Policy: Outlines acceptable use of company systems and data by employees.
3. Audit Controls Policy: Describes the auditing process to ensure compliance with HIPAA regulations.
4. Authentication and Authorization Policy and Procedures: Outlines how users are identified and authorized to access resources.
5. Change Management Policy and Procedures: Specifies how changes to systems and data are managed and controlled.
6. Contingency Planning Policy: Outlines how PHI is backed up, how PHI is accessed in emergency situations, and how systems are restored after an outage.
7. Identification and Authentication Policy: Defines rules and procedures for verifying and granting access to information systems and resources.
8. Incident Response Plan: Outlines the steps to be taken in the event of a security incident or breach.
9. System Monitoring and Auditing Policy and Procedures: Describes how system activity is monitored and audited.
10. Privacy and Confidentiality Policy: Outlines how personal information is protected and used.
11. Security Risk Assessments Policy and Procedures: Describes how risks to personal information are identified and managed.
12. Security Awareness Training Policy: Describes the requirements for employee security training and awareness.
13. Data Governance Policy and Procedures: Outlines how data is collected, stored, processed, and used.
14. Maintenance Policy: Specifies how systems and equipment are maintained.
15. Media Protection Policy: Outlines how media containing sensitive information is protected.
16. Personnel Security Policy: Outlines the requirements and processes for personnel background checks and clearances.
17. Physical and Environmental Protection Policy: Describes the controls in place to protect physical assets and the environment.
18. Risk Assessment Policy: Describes the process for identifying and assessing risks to systems and data.
19. Risk Management Policy: Outlines how risks to systems and data are managed and controlled.
20. Security Awareness and Training Policy: Describes the requirements for employee security training and awareness.
21. System and Communications Protection Policy: Specifies the controls in place to protect systems and communications.
22. System and Information Integrity Policy: Outlines the requirements for protecting the integrity and availability of information and systems.

Our One year subscription consists of the following items:

• 20 Starter Policy Documents
• 17 Starter Standard operating procedures
• Upgrades based on framework changes
• Deployment to your Policy Scorecard library repository

Our Policy packs consist of the following starter documents:

1. Asset Management Policy: Describes the policies and procedures for managing assets.
2. Password Policy: Outlines the requirements for creating and managing passwords.
3. Privacy Policy: Describes how personal information is collected, used, and disclosed.
4. Remote Access Policy: Outlines the requirements for accessing systems and data remotely.
5. User Account Creation: Outlines the process for creating and managing user accounts.
6. Work From Home Policy: Outlines the requirements and policies for working from home.
7. Access Control Policy: Describes the requirements and procedures for controlling access to systems and data.
8. Awareness and Training Security Awareness and Training Policy: Outlines the requirements and procedures for employee security awareness and training.
9. Configuration Management Policy: Describes the policies and procedures for managing system configurations.
10. Maintenance Policy: Describes the policies and procedures for maintaining systems and equipment.
11. Physical Environmental Protection Policy: Outlines the requirements for protecting the physical environment.
12. Physical Protection Policy: Outlines the policies and procedures for protecting physical assets.
13. Risk Assessments Risk Management Policy: Describes the process for identifying and managing risks.
14. Security Assessment Policy: Outlines the requirements and procedures for security assessments.
15. System and Communications Protection Policy: Describes the controls in place to protect systems and communications.
16. System and Information Integrity Policy: Outlines the requirements for protecting the integrity and availability of information and systems.
17. Audit and Accountability Policy: Outlines the requirements for auditing and accountability.
18. Identification and Authentication Policy: Outlines the requirements for identifying and authenticating users.
19. Media Protection Policy: Outlines the policies and procedures for protecting media containing sensitive information.
20. Personnel Security Policy: Outlines the requirements and processes for personnel security.
21. Access Control SOP: Procedures for controlling access to systems and data.
22. Asset Management SOP: Procedures for managing assets.
23. Audit Logging SOP: Procedures for logging and monitoring system activities.
24. Configuration Management SOP: Procedures for managing system configurations.
25. Incident Response SOP: Procedures for responding to security incidents.
26. Information Protection SOP: Procedures for protecting sensitive information.
27. Malware Protection SOP: Procedures for protecting against malware.
28. Media Protection SOP: Procedures for protecting media containing sensitive information.
29. Password Management SOP: Procedures for managing passwords.
30. Physical Protection SOP: Procedures for protecting physical assets.
31. Risk Assessment SOP: Procedures for identifying and assessing risks.
32. Security Assessment SOP: Procedures for assessing security controls and processes.
33. Security Awareness and Training SOP: Procedures for security awareness and training.
34. System Maintenance SOP: Procedures for maintaining systems and equipment.
35. Third-Party Management SOP: Procedures for managing third-party risks.
36. Vulnerability Management SOP: Procedures for identifying and managing vulnerabilities.
37. Workforce Management SOP: Procedures for managing personnel security.