Records you can show
The questions insurers, auditors, clients and surveyors ask are plain. The answers should be written down.
| They ask | What we do | What you can show |
|---|---|---|
| Who can sign in, and how? | Two-step sign-in, a password manager and prompt removal of access when someone leaves | An access list and a record of removals |
| Is everything backed up? | Backups kept in more than one place and tested | Backup reports and restore test records |
| Are computers protected and updated? | Monitored, updated and encrypted computers | A monthly report of what was patched and protected |
| What happens if something goes wrong? | A written plan for who to call and what to do | The plan, kept current |
| Who are your vendors, and when do contracts end? | A tracked list of internet, phone and copier contracts | A vendor and renewal list |
What is provided
- Written policies and records kept current
- A risk analysis, as a project
- A business associate agreement, for organizations that handle patient health information
- A monthly report on what we did
- Quarterly testing of your defenses and a scan for weak spots on Expedition
An honest note. We support your compliance program rather than replace it. No one can promise that nothing will ever go wrong. We focus on being prepared and helping you recover quickly.
Expedition is our compliance-grade plan. See the plans.
Want to see what a security scorecard looks like? Ask us for a sample when you contact us.
See where you stand
A free Solid Ground Assessment is a good first step before any compliance work.
Request your assessment