article thumbnail

Tips for Managing Third-Party Risk in Health Care

Reciprocity

Access Assessment evaluates who has access to which data, how they got access, what they’re doing with it, and if they should still have access. The questionnaire should include questions about the vendor’s data security practices, business recovery plans, and disaster recovery plans.