Compliance; Gap Analysis Clause Samples

Compliance; Gap Analysis. 1. ISU shall provide documentation of its updated compliance gap analysis activity entitled Post Incident Risk Assessment, as specified by HHS, indicating changes in compliance status regarding each Security Rule provision. Such documentation shall include, but is not limited to, a copy of the contingency plan and the documents implementing the contingency plan as well as a listing of all technical safeguards implemented and the documents implementing the technical safeguards, across its covered health care component clinics, within 30 days of the Effective Date.
Compliance; Gap Analysis. No less than annually, SBTech shall deliver to Lottery either (a) a third party attestation of SBTech’s compliance with the security standards set forth in Section 13.7.1, or (b) a gap analysis that describes any deviation of SBTech’s information security practices from the standards set forth in Section 13.7.1, and the schedule for addressing any such deviations.