breach-notification Controls

Implement policies and procedures to address security incidents involving ePHI

Cybersecurity requirements are integrated into contracts with suppliers

The impact of the incident is understood

Internal and external stakeholders are notified of incidents in a timely manner

Security information is communicated to external parties