Compliances
- Compliant
HIPAA - Compliant
SOC 2 Type II
Trusted by
- Prescient Securityhttps://prescientsecurity.com/
Controls
DetailsControl Environment
- Security awareness training implemented
- Compliance with policies, rules and standards for information security
- Code of Conduct acknowledged by contractors
- Board meetings conducted
- Audit controls implemented
- Board charter documented
- +6 more
Communication and Information
- System changes communicated
- SOC 2 - System Description
- Security policies established and reviewed
- Data integrity maintained
- System changes externally communicated
- Code of Conduct acknowledged by employees and enforced
- Third-party agreements established
Risk Assessment
- Infrastructure performance monitored
- Compliance with policies, rules and standards for information security
- Risk assessment objectives specified
- Annual risk assessment performed annually
- Audit controls implemented
- Risk management program established
- +2 more
Monitoring Activities
- Security controls evaluated
- Critical system review performed quarterly
- Nonconformity and corrective action
- Audit controls implemented
- Board oversight briefings conducted
Control Activities
- Security controls evaluated
- Documentation change control
- Operational system checks
- Compliance with policies, rules and standards for information security
- Audit controls implemented
- Risk management program established
- +2 more