Transformation Healthcare INC Cyber Security and Information Classification Policy Document Control Quiz

The Cyber Security and Information Classification Policy applies only to contractors, not employees.

Sensitive information includes PHI and ePHI, but not any other confidential or proprietary information.

All employees, contractors, and third-party vendors must have the same user accounts and passwords to access information systems.

Clear desk and screen-locking policy is in place to allow easy access to sensitive information.

Transformation Healthcare INC. does not need to establish business associate agreements (BAAs) with third-party vendors handling PHI or ePHI.

Logs shall not be regularly reviewed for any suspicious activities or unauthorized access attempts.

All security incidents or breaches must be reported to the designated IT or security team immediately for investigation and remediation.

Access to areas containing sensitive information, such as data centers, must not be restricted and monitored.

Non-compliance with the policy will not result in any disciplinary actions.