Training and Awareness Requirements. The CDO shall develop role-based training and awareness programs for members of its Workforce, and CAC shall participate in such training and awareness programs. Specifically, the CDO must require members of its Workforce to successfully complete privacy and security training that is specifically tailored and relevant to their work duties and level of exposure to PII, and prior to when they assume responsibility for/have access to PII, and CAC must successfully complete such training prior to assuming responsibility for/having access to PII.
Training and Awareness Requirements. 28.1 Managers and employees will be informed about this policy and procedure via relevant communication channels.
Training and Awareness Requirements. CDO shall develop role-based training and awareness programs for its staff, volunteers, and representatives, and CACs shall participate in such training and awareness programs. CDO shall require its representatives to participate in these training and awareness programs. Specifically, CDO must require its staff, volunteers, and representatives to successfully complete privacy and security training that is specifically tailored and relevant to the representatives’ work duties and level of exposure to personal information, prior to when the staff, volunteers, and representatives assume responsibility for or having access to such information, and CACs must successfully complete such training prior to assuming responsibility for or having access to personal information.
Training and Awareness Requirements. The CDO shall develop role-based training and awareness programs for members of its Workforce, and CAC shall participate in such training and awareness programs. Specifically, the CDO must require members of its Workforce to successfully complete privacy and security training that is specifically tailored and relevant to their work duties and level of exposure to PII, and prior to when they assume responsibility for/have access to PII, and CAC must successfully complete such training prior to assuming responsibility for/having access to PII. Standard Operating Procedures Requirements. The CDO shall incorporate the privacy and security standards and implementation specifications required under this Appendix A, where appropriate, in its standard operating procedures that are associated with the functions authorized under the CMS-CDO Agreement involving the creation, collection, disclosure, access, maintenance, storage, or use of PII. CAC must comply with these standard operating procedures. The CDO’s standard operating procedures: Must be written in plain language and be available to all of the CDO’s Workforce; Must ensure the CDO/CAC’s cooperation with CMS in resolving any Incident or Breach, including (if requested by CMS) the return or destruction of any PII files it received under the CMS-CDO Agreement and/or agreement between CDO and CAC; the provision of a formal response to an allegation of unauthorized PII use, reuse or disclosure; and/or the submission of a corrective action plan with steps designed to prevent any future unauthorized uses, reuses or disclosures; and Must be designed and implemented to ensure the CDO and its Workforce comply with the standards and implementation specifications contained herein, and must be reasonably designed, taking into account the size and the type of activities that relate to PII undertaken by the CDO, to ensure such compliance.
