Sensitive Information Policy
Now with HIPAA Audit Program Guide
Sensitive Information Policy - This policy is easily modified and defines how to treat Credit Card, Social Security, Employee, and Customer Data. The template is 22 pages in length and complies with Sarbanes Oxley Section 404, ISO27000 and HIPAA.
This policy applies to the entire enterprise, its vendors, its suppliers (including outsourcers) and co-location providers and facilities regardless of the methods used to store and retrieve sensitive information (e.g. online processing, outsourced to a third party, Internet, Intranet or swipe terminals).
The Policy is fully compliant with all mandated requirments included the EU's GDPR
The HIPAA Audit Program Guide provides you with a checklist of the must be implemented items which HIPAA mandates.
You can download the Table of Contents and some sample pages by clicking on the link below.