Common use of Security and Regulatory Management Clause in Contracts

Security and Regulatory Management. The Contractor will maintain physical and logical security relative to the services it provides. This will include an overview of the policies and practices to prevent, detect, and resolve security breaches. In addition, the Contractor shall demonstrate experience and ability to meet all regulatory requirements (e.g., FISMA, HIPAA, and Vermont Statutes). The Contractor will provide an information security structure that is based upon the ISO27001 framework which is in line with HIPAA and HITECH acts. The following minimum activities are performed to ensure current and future compliance: i. All health care associates are mandated to undergo four stages of e-learning sessions on HIPAA; they must complete an assessment on their HIPAA understanding.