Per occurrence, the Must provide an Operations Privacy and next 35 business Security Management Plan a minimum of days and every Provide an Operations Privacy and Security 90 calendar days prior to the start of following seven (7) IV.M Privacy and Security Management Plan operations. 2 calendar days Per occurrence, the next 30 calendar Must execute a Privacy and Security days and every Execute a Privacy and Security Management Management Plan within a maximum of following seven (7) IV.M Privacy and Security Plan 30 calendar days after State approval. 2 calendar days Per occurrence, the Must provide an annual independent next 30 calendar security audit report within a maximum of days and every 30 calendar days of annual audit following seven (7) IV.M Privacy and Security Provide an annual independent security audit completion due date. 2 calendar days Per occurrence, the Must provide a Corrective Action Plan for next 30 calendar any deficiencies found in the security days and every audit within a maximum of 10 business following seven (7) IV.M Privacy and Security Provide a Corrective Action Plan days of the receipt of the audit report. 2 calendar days IV.N.4 Managing Queries and Federal reports will be produced in Reports Predefined and Timeliness with which federal reports will be compliance with federal reporting – produced timelines. 1 Per month IV.N.4 Managing Queries and Reports Predefined and Federal reports will be produced with – Accuracy of federal reports. 100% accuracy. 1 Per month IV.N.4 Managing Queries and Reports Predefined and Within a maximum of one (1) business – Time to notify State of issues with reports day of detection. 3 Per occurrence Availability of the Case Management system Case Management will be available a Per each full hour of according to the maintenance schedule minimum of 99% of the time per month additional down-time, IV.N.6 Case Management agreed upon by vendor and the State other than scheduled maintenance time. 3 per month
IV.M Privacy and Security Provide an Operations Privacy and Security Management Plan Must provide an Operations Privacy and Security Management Plan a minimum of 90 calendar days prior to the start of operations. 2 Per occurrence, the next 35 business days and every following seven (7) calendar days IV.M Privacy and Security Execute a Privacy and Security Management Plan Must execute a Privacy and Security Management Plan within a maximum of 30 calendar days after State approval. 2 Per occurrence, the next 30 calendar days and every following seven (7) calendar days IV.M Privacy and Security Provide an annual independent security audit Must provide an annual independent security audit report within a maximum of 30 calendar days of annual audit completion due date. 2 Per occurrence, the next 30 calendar days and every following seven (7) calendar days IV.M Privacy and Security Provide a Corrective Action Plan Must provide a Corrective Action Plan for any deficiencies found in the security audit within a maximum of 10 business days of the receipt of the audit report. 2 Per occurrence, the next 30 calendar days and every following seven (7) calendar days IV.N.4 Managing Queries and Reports – Predefined and Timeliness with which federal reports will be produced Federal reports will be produced in compliance with federal reporting timelines. 1 Per month IV.N.4 Managing Queries and Reports – Predefined and Accuracy of federal reports. Federal reports will be produced with 100% accuracy. 1 Per month IV.N.4 Managing Queries and Reports – Predefined and Time to notify State of issues with reports Within a maximum of one (1) business day of detection. 3 Per occurrence IV.N.6 Case Management Availability of the Case Management system according to the maintenance schedule agreed upon by vendor and the State Case Management will be available a minimum of 99% of the time per month other than scheduled maintenance time. 3 Per each full hour of additional down-time, per month