When a DORA major incident must be reported, what each of the three reports contains, who receives them, and a template to prepare before you need it.

SOC 2 Report Readiness A customer has asked for a SOC 2 report, and the work looks bigger than a questionnaire. It is bigger, but it is not mysterious. A licensed CPA firm examines your description of ...

Templates for the letter that covers the time after a report period ends, for management's response to an exception, and for sharing a report under a confidentiality agreement. Decide what the report ...

A management-led check before the auditor starts: how to find gaps and exceptions, fix them, and decide when to begin the observation period. Decide what the report is for. Draw the boundary around ...

Sets out a repeatable method for the security risk analysis: the inventory of electronic patient information, threats, vulnerabilities, ratings and the signed record. Know your role. Know every system ...

This document is for the person who has an agreement in front of them and has to say what the security terms in it are worth. It lists the sixteen security terms a business associate agreement should ...

Lists the 61 Trust Services Criteria by number and series title, with blank columns for your own controls, owners and evidence. It makes no coverage claim. 1 What this is. The Trust Services Criteria ...

Walks an incident through the breach presumption, the exclusions, secured information and the four-factor assessment, to a signed decision. This procedure takes an event that involves protected health ...

Dates the observation period, the evidence points inside it, any exceptions found and the management responses, and the dates for bridge letters. 1 What this workbook is. It is the Observation Period ...

A single readiness assessment that shows blocking items and where to start before a SOC 2 examination. It gives no score. 1 Do the scoping assessment first (SOC 2 Report Scoping Assessment), so that ...

Questions to ask and points to settle when choosing the licensed CPA firm that will examine you: independence, peer review, scope, timeline and cost structure. 1 What this is. The Auditor (CPA Firm) ...

Answer it online instead: How ready are we for HIPAA?About 25 minutes, free, and nothing is stored. 1 Before you start, decide your role under HIPAA with the HIPAA Applicability Assessment (P31-A02), ...