Policies

 
Access
Access Control
Security
Authentication and Authorization
Access to CloudCore systems and application is limited for all users, including but not limited to workforce members, volunteers, business associates, contracted providers…
 
Asset Management
IT Management
Risk Management
Asset Inventory
Asset Inventory Management You can’t protect what you can’t see.
 
Breach Investigation and Notification
Incident Response
Privacy
Regulatory Compliance
To provide guidance for breach notification when impressive or unauthorised access, acquisition, use and/or disclosure of the ePHI occurs.
 
Business Continuity and Disaster Recovery
Risk Management
Operational Continuity
Disaster Recovery
The CloudCore Contingency Plan establishes procedures to recover CloudCore following a disruption resulting from a disaster.
 
Compliance Audits and External Communications
Compliance
Audit Management
External Communication
CloudCore may be requested occasionally to share additional details regarding its compliance, privacy and security program by an external entity such as a customer, media…
 
Configuration and Change Management
IT Management
Change Management
Operational Security
CloudCore standardises and automates configuration management through the use of automation scripts as well as documentation of all changes to production systems and…
 
Cookie Policy
Privacy
User Consent
Web Technologies
We at CloudCore (CloudCore and our subsidiaries and affiliates) are committed to protecting your privacy.
 
Data Management Policy
Data Lifecycle
Backup and Recovery
Data Classification
This policy outlines the requirements and controls/procedures CloudCore has implemented to manage the end-to-end data lifecycle, from data creation/acquisition to retention…
 
Data Protection
Data Security
Compliance
Encryption Standards
CloudCore takes the confidentiality and integrity of its customer data very seriously.
 
Document Numbering System Policy
Document Management
Compliance
The Policy Document Numbering System is established to provide a structured and consistent method for assigning document numbers to all policy documents within CloudCore.
 
Facility Access and Physical Security
Physical Security
Access Control
Facility Management
It is the goal of CloudCore to provide a safe and secure environment for all employees.
 
GDPR
Compliance
Data Protection
Privacy
This Data Protection Addendum (this “Addendum”) is made and entered into as of the date appearing on the signature page hereto (the “Effective Date”) by and between…
 
HIPPA
Healthcare Compliance
Data Security
Privacy
CloudCore HIPAA Business Associate Agreement (“BAA”) ## Introduction This document includes sample business associate agreement provisions to help covered entities and…
 
HR and Personnel Security
Human Resources
Employee Management
Training
CloudCore is committed to ensuring all workforce members actively address security and compliance in their roles at CloudCore.
 
Incident Response
Security Management
Incident Response
Operational Security
CloudCore implements an information security incident response process to consistently detect, respond, and report incidents, minimise loss and destruction, mitigate the…
 
Mobile Device Security and Storage Media Management
IT Management
Device Security
Data Protection
CloudCore recognises that media containing sensitive data may be reused when appropriate steps are taken to ensure that all stored sensitive data has been effectively…
 
Policy Management
Compliance
Policy Development
Version Control
CloudCore implements policies and procedures to maintain compliance and integrity of data.
 
Privacy Policy
Privacy
Data Protection
Compliance
We at CloudCore (CloudCore and our subsidiaries and affiliates) are committed to protecting your privacy.
 
Privacy and Consent
Privacy
Data Protection
User Consent
Policy Statements CloudCore is committed to protecting the privacy of our customers.
 
Risk Management
Risk Management
Security Management
Operational Security
This policy establishes the scope, objectives, and procedures of CloudCore’s information security risk management process.
 
Roles, Responsibilities and Training
Human Resources
Security Management
Training
Security and compliance is everyone’s responsibility.
 
Secure Software Development and Product Security
IT Management
Security Architecture
Secure Development
CloudCore development team follows the latest security best practices when developing software, and automates security testing throughout development lifecycle whenever…
 
Security Architecture and Operating Model
IT Management
Security Architecture
Operational Security
In the digital age, cyber attacks are inevitable.
 
System Audits, Monitoring and Assessments
Compliance
Security Management
Operational Security
CloudCore shall audit, monitor, and assess the access and activity of systems and applications that process or store production and/or sensitive data such as personally…
 
Third Party Security, Vendor Risk Management and Systems/Services Acquisition
Vendor Management
Risk Management
Compliance
CloudCore makes every effort to assure all third party organisations are compliant and do not compromise the integrity, security, and privacy of CloudCore or CloudCore…
 
Threat Detection and Prevention
Security Management
Intrusion Detection
Threat Intelligence
In order to preserve the integrity of data that CloudCore stores, processes, or transmits for Customers, CloudCore implements strong intrusion detection tools and policies…
 
Vulnerability Management
Security Management
IT Management
Risk Assessment
Policy Statements CloudCore policy requires that: (a) All product systems must be scanned for vulnerability at least quarterly and with each major change.
No matching items