CAST is an automated database and software application that enables business partners to perform their self-assessments by entering data into electronic CAST questionnaires that are based on the HCFA Core Security Requirements and Protocols. The contractor will provide the CAST output as part of submitted certification material. CAST also records information about a site, Risk Analysis schedules, and Contingency Planning schedules. The CAST database includes Protocols designed to assess compliance with Core Security Requirements. Business partners can also use CAST to conduct self-assessments in preparation for audits by specific external agencies.
CAST can then produce a formatted report of self-assessment results.
CAST can also be used to analyze security data and output graphical analyses. Yes - indicates that the systems or elements of operation conform to all aspects of the Control Technique. What can be used to verify compliance. Where applicable documentation can be found. It includes all aspects outlined in the Control Technique as documented in company policy NG 7541-S3.