Feed
Description

Outsourcing Policy

This policy is eighteen page in length and defines everything that is need for function to be outsourced.  The policy comes as a Microsoft Word document that can be modified as needed.  The template has been updated to include a HIPAA audit program definition:

• Outsourcing Management Standard

  • Service Level Agreement

  • Responsibility

• Outsourcing Policy

  • Policy Statement

  • Goal

• Approval Standard

  • Base Case

  • Responsibilities
     

Note: Look at the Practical Guide for Outsourcing over 110 page document for a more extensive process for outsourcing

Other Policies

All of the policies that are provided here are contained within one or more of the templates that are on this site. These policies have been added as individual documents in WORD format for those clients who just need this particular policy.  All policies are Sarbanes-Oxley compliant

 

Internet,  E Mail,
and
Electronic Communication
Policy

 

 

This policy is twenty-three (23) page in length, is compliant with all recent legislation (SOX, HIPAA, Patriot Act, and Sensitive information), and covers:

• Appropriate use of equipment

• Internet access

• Electronic Mail

• Retention of e-mail on personal systems

• E-mail and business records retention

• Copyrighted materials

• Banned activities

• Ownership of information

• Security

• Sarbanes-Oxley

• Abuse

Included are ready to these ready to use forms:

• Internet & Electronic Communication Employee Acknowledgement (short form)

• E-Mail - Employee Acknowledgement (short form)

• Internet Use Approval Form

• Internet Access Request Form

 

 

Sensitive Information Policy
 

This policy covers the treatment of Credit Card, Social Security, Employee, and Customer Data.  The policy is 15 pages in length. This policy complies with Sarbanes Oxley Section 404.

 

The policy applies to the entire enterprise, its vendors, its suppliers (including outsourcers) and co-location providers and facilities regardless of the methods used to store and retrieve sensitive information (e.g. online processing, outsourced to a third party, Internet, Intranet or swipe terminals).  CLICK on image to get the full table of contents and a sample page.

 

 

 

Travel and Off-Site Meeting Policy - Protection of data and software is often is complicated by the fact that it can be accessed from remote locations. As individuals travel and attend off-site meetings with other  employees, contractors, suppliers and customers data and software can be compromised.  This policy is four page in length and covers:

• Data and application security

• Minimize attention

• Shared public resources

• Off-site meeting special considerations