Stand-Alone IS Accreditation Sample Clauses

Stand-Alone IS Accreditation. Stand-alone ISs are treated as special types of enclaves that are not interconnected to any other network. Stand-alone systems do not transmit, receive, route, or interchange information outside of the system’s accreditation boundary. IA requirements for a stand-alone system are determined by its MAC and classification or sensitivity and need-to-know just as for other DoD ISs. Stand-alone systems must always be clearly identified as such on the IT Security POA&M, the SIP, and the DIACAP Scorecard. Because of the unique architecture of a stand-alone system, certain IA controls do not pose a risk to the system as a result of their non-implementation and thus are considered NA. NA IA controls are labeled as NA on the DIACAP Scorecard and addressed on the IT Security POA&M simply as a means to document and explain why the IA control is NA in the comments column. Refer to the KS for a discussion of IA controls that may be considered NA for stand-alone systems. Additionally, stand-alone systems that are deployed to multiple locations may be type accredited.
Sample 1
AutoNDA by SimpleDocs

Related to Stand-Alone IS Accreditation

  • Accreditation The School shall be accredited as provided by rule of the state board of education.

  • Accreditation of Online Schools The District will implement a system of accrediting its online schools, as defined in section 22-30.7- 102(9.5), C.R.S. This system shall adhere to section 00-00-000, C.R.S., including a review of the online school’s alignment to the quality standards outlined in section 22-30.7-105(3)(b), C.R.S., and compliance with statutory or regulatory requirements, in accordance with section 22-30.7-103(3)(m), C.R.S.

  • LICENSING, ACCREDITATION AND REGISTRATION The Contractor shall comply with all applicable local, state, and federal licensing, accreditation and registration requirements or standards necessary for the performance of this Contract.

  • ACCREDITATION AND STANDARDS The IOP hereby agrees to: (a) Be licensed to provide IOP services within the applicable jurisdiction in which it operates. (b) Be specifically accredited by and remain in compliance with standards issued for IOPs by TJC, CARF, CoA, or an accrediting organization approved by the Director, DHA. The contractor may submit (via the TRO, the TOPO, or the COR for the USFHP) additional accrediting organizations for TRICARE authorization, subject to approval by the Director, DHA. (c) Accept the allowable IOP rate, as provided in 32 CFR 199.14(a)(2)(ix), as payment in full for services provided. (d) Comply with all requirements of 32 CFR 199.4 applicable to institutional providers generally concerning concurrent care review, claims processing, beneficiary liability, double coverage, utilization and quality review, and other matters. (e) Ensure that all mental health services are provided by qualified mental health providers who meet the requirements for individual professional providers. (Exception: IOPs that employ individuals with master’s or doctoral level degrees in a mental health discipline who do not meet the licensure, certification, and experience requirements for a qualified mental health provider but are actively working toward licensure or certification, may provide mental health services within the per diem rate but the individual must work under the direct clinical supervision of a fully qualified mental health provider employed by the IOP.) All other program services will be provided by trained, licensed staff. (f ) Not bill the beneficiary for services in excess of the cost-share or services for which payment is disallowed for failure to comply with requirements. (g) Not bill the beneficiary for services excluded on the basis of 32 CFR 199.4(g)(1) (not medically or psychologically necessary), (g)(3) (inappropriate level of care), or (g)(7) (custodial care), unless the beneficiary has agreed in writing to pay for the care, knowing the specific care in question has been determined as noncovered. (A general statement signed at admission as to financial liability does not fill this requirement.)

  • Policy Compliance Violations The Requester and Approved Users acknowledge that the NIH may terminate the DAR, including this Agreement and immediately revoke or suspend access to all controlled-access datasets subject to the NIH GDS Policy at any time if the Requester is found to be no longer in agreement with the principles outlined in the NIH GDS Policy, the terms described in this Agreement, or the Genomic Data User Code of Conduct. The Requester and PI agree to notify the NIH of any violations of the NIH GDS Policy, this Agreement, or the Genomic Data User Code of Conduct data within 24 hours of when the incident is identified. Repeated violations or unresponsiveness to NIH requests may result in further compliance measures affecting the Requester. The Requester and PI agree to notify the appropriate DAC(s) of any unauthorized data sharing, breaches of data security, or inadvertent data releases that may compromise data confidentiality within 24 hours of when the incident is identified. As permitted by law, notifications should include any known information regarding the incident and a general description of the activities or process in place to define and remediate the situation fully. Within 3 business days of the DAC notification(s), the Requester agrees to submit to the DAC(s) a detailed written report including the date and nature of the event, actions taken or to be taken to remediate the issue(s), and plans or processes developed to prevent further problems, including specific information on timelines anticipated for action. The Requester agrees to provide documentation verifying that the remediation plans have been implemented. Repeated violations or unresponsiveness to NIH requests may result in further compliance measures affecting the Requester. All notifications and written reports of data management incidents should be sent to the DAC(s) indicated in the Addendum to this Agreement. NIH, or another entity designated by NIH may, as permitted by law, also investigate any data security incident or policy violation. Approved Users and their associates agree to support such investigations and provide information, within the limits of applicable local, state, tribal, and federal laws and regulations. In addition, Requester and Approved Users agree to work with the NIH to assure that plans and procedures that are developed to address identified problems are mutually acceptable and consistent with applicable law.

  • Licensure The Contractor covenants that it has:

  • Privacy Compliance The Provider shall comply with all applicable federal, state, and local laws, rules, and regulations pertaining to Student Data privacy and security, all as may be amended from time to time.

  • Authorization and Application of Overtime (a) An employee who is required to work overtime shall be entitled to overtime compensation when:

  • CERTIFICATION REGARDING BOYCOTTING CERTAIN ENERGY COMPANIES (Texas law as of September 1, 2021) By submitting a proposal to this Solicitation, you certify that you agree, when it is applicable, to the following required by Texas law as of September 1, 2021: If (a) company is not a sole proprietorship; (b) company has ten (10) or more full-time employees; and (c) this contract has a value of $100,000 or more that is to be paid wholly or partly from public funds, the following certification shall apply; otherwise, this certification is not required. Pursuant to Tex. Gov’t Code Ch. 2274 of SB 13 (87th session), the company hereby certifies and verifies that the company, or any wholly owned subsidiary, majority-owned subsidiary, parent company, or affiliate of these entities or business associations, if any, does not boycott energy companies and will not boycott energy companies during the term of the contract. For purposes of this contract, the term “company” shall mean an organization, association, corporation, partnership, joint venture, limited partnership, limited liability partnership, or limited liability company, that exists to make a profit. The term “boycott energy company” shall mean “without an ordinary business purpose, refusing to deal with, terminating business activities with, or otherwise taking any action intended to penalize, inflict economic harm on, or limit commercial relations with a company because the company (a) engages in the exploration, production, utilization, transportation, sale, or manufacturing of fossil fuel-based energy and does not commit or pledge to meet environmental standards beyond applicable federal and state law, or (b) does business with a company described by paragraph (a).” See Tex. Gov’t Code § 809.001(1).

  • Regulatory Good Standing Certification Does Vendor certify that its entity is in good standing will all government entities and agencies, whether local, state, or federal, that regulate any aspect of Vendor's field of work or business operations? If Vendor selects "No", Vendor must provide explanation on the following attribute question. Yes

Time is Money Join Law Insider Premium to draft better contracts faster.