II.O Design, Development, Must perform, monitor, and and Implementation (DDI) document operational testing – Operational Readiness results. Must correct identified problems, failures, incompatibilities, and errors identified during operational readiness. Modifications must be II.O Design, Development, documented, and the Contractor and Implementation (DDI) must conduct another review of the – Operational Readiness readiness. II.O Design, Development, and Implementation (DDI) Must provide and walkthrough an – Operational Readiness Operational Readiness Report. II.O Design, Development, Must receive State approval prior and Implementation (DDI) to entering and exiting operational – Operational Readiness readiness. Must develop a Privacy and II.P Design, Development, Security Plan. This plan must and Implementation (DDI) include both physical and network – Privacy and Security security. II.P Design, Development, Must maintain a comprehensive and Implementation (DDI) audit trail of systematic and – Privacy and Security physical access to PHI. Must comply with all security and privacy laws, regulations, and policies, including the Health Insurance Portability and II.P Design, Development, Accountability Act (HIPAA), and and Implementation (DDI) related breach notification laws – Privacy and Security and directives. Must inform the State of any II.P Design, Development, potential, suspected, or confirmed and Implementation (DDI) breach immediately upon – Privacy and Security Contractor becoming aware. Must provide initial and ongoing privacy and security training to all II.P Design, Development, employees and contract personnel and Implementation (DDI) assigned to the project prior to – Privacy and Security providing access to PHI.
II.O Design, Development, and Implementation (DDI) – Operational Readiness Must perform, monitor, and document operational testing results. II.O Design, Development, and Implementation (DDI) – Operational Readiness Must correct identified problems, failures, incompatibilities, and errors identified during operational readiness. Modifications must be documented, and the Contractor must conduct another review of the readiness. II.O Design, Development, and Implementation (DDI) – Operational Readiness Must provide and walkthrough an Operational Readiness Report. II.O Design, Development, and Implementation (DDI) – Operational Readiness Must receive State approval prior to entering and exiting operational readiness. II.P Design, Development, and Implementation (DDI) – Privacy and Security Must develop a Privacy and Security Plan. This plan must include both physical and network security. II.P Design, Development, and Implementation (DDI) – Privacy and Security Must maintain a comprehensive audit trail of systematic and physical access to PHI. II.P Design, Development, and Implementation (DDI) – Privacy and Security Must comply with all security and privacy laws, regulations, and policies, including the Health Insurance Portability and Accountability Act (HIPAA), and related breach notification laws and directives. II.P Design, Development, and Implementation (DDI) – Privacy and Security Must inform the State of any potential, suspected, or confirmed breach immediately upon Contractor becoming aware. II.P Design, Development, and Implementation (DDI) – Privacy and Security Must provide initial and ongoing privacy and security training to all employees and contract personnel assigned to the project prior to providing access to PHI.