The purpose of this policy is to define a basic calendar of recurring and initial actions to ensure initial and ongoing compliance.
| Topic | Action | Frequency | Form |
|---|---|---|---|
| Initial Set-up | Conduct Full Analysis | Initial Actions | Security Gap Analysis |
| Initial Set-up | Familiarize with Policies and Forms | Initial Actions | N/A |
| Initial Set-up | Train Staff (Policies, HIPAA) | Initial Actions | N/A |
| System Access | Systems Patches Update | Monthly | Hardware and Systems Software Maintenance C |
| Data Backup | Test Back-up | Quarterly | Data Back-up test |
| Information Systems Audit | Review records of information system activity:
|
Quarterly | N/A |
