Do you and/or can you utilize multifactor authentication to establish nonlocal maintenance V sessions via external network Yes No Explain W connections and terminate such connections when nonlocal maintenance is complete? Please specify Department or IT unit responsible for 3rd party patching? R Incident Response Components V Which organization is the primary interface for security incidents, or W other incidents to the system? When an incident involving UNMH V EPHI data is detected, when is W UNMH Notified? Frequency of IR Notifications? All SAAS vendors must provide UNMH a SAS70 ISO 270001 report related to their implementation/deployment of V their security controls related W to their organization and their IAAS/PAAS vendor (s) (Listing of their policies/procedures) Can you supply this report?
V W Do you and/or can you utilize multifactor authentication to establish nonlocal maintenance sessions via external network connections and terminate such connections when nonlocal maintenance is complete? Yes No Explain R Please specify Department or IT unit responsible for 3rd party patching? Incident Response Components V W Which organization is the primary interface for security incidents, or other incidents to the system? V W When an incident involving UNMH EPHI data is detected, when is UNMH Notified? Frequency of IR Notifications? V W All SAAS vendors must provide UNMH a SAS70 ISO 270001 report related to their implementation/deployment of their security controls related to their organization and their IAAS/PAAS vendor (s) (Listing of their policies/procedures) Can you supply this report?
p392-cybersecurity-plan.docx