DistrictZero is in compliance with security best practices, has implemented and is monitoring comprehensive controls, and maintains policies to outline its security procedures.
DistrictZero complies with HIPAA standards, ensuring the privacy and security of health information.
In-scope repositories
List of Changes
Sample changes
Customers List
Patient status and admission records
ePHI data sanitization
Customer termination
RGEC Charter and minutes
Risk management program established
ITLC charter and minutes
ePHI risk assessment report
List of newly hired employees & contractors
List of terminated employees & contractors
List of active employees & contractors as on date
New Employee and contractor acknowledgement
Security Incident
Incidents list
Incident Management Samples
Breach notification communication
Intrusion detection tool
WAF
Asset register list
Asset maintaining
Vendor list
Vendor management program established
Vendor onboarding
Business associate agreements signed
Access Control and Termination Policy
Baseline Hardening Policy
Board of Directors Charter
Breach Notification Policy
Business Continuity and Disaster Recovery
Change Management Policy
Chief Information Security Officer (CISO) Policy
Company Handbook
Data Classification Policy
HIPAA Internal Privacy Policy
Incident Response Policy
Information Technology Leadership Committee Charter
Network Security Policy
Personnel Security Policy
PHI De-identification Policy and Procedure
Risk and Governance Executive Committee Charter
Vendor Management Policy
