Vantage Flex, LLC HOME FORMS FSA/HRA STORE HIPAA/PII SECURITY SERVICES CONTACT US MY ACCOUNT Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) DATA BREACH STATISTICS ARE YOU PROTECTED FROM A DATA BREACH IT'S YOUR DATA, DO YOUR EMPLOYEES KNOW HOW TO PROTECT IT? PREVENT, REACT TO, AND SURVIVE A DATA BREACH For a Quote for a HIPAA or PII Risk Assessment, please complete the form below. First name Last name Email Address City State Zip code Phone Number of employee Last date a Risk Assessment was completed? Please complete the following so we have a Group Snapshot Have you completed a Risk Assessment? No Yes Have you implemented a Risk Management Program No Yes Does the organization have a Sanction Policy? No Yes Has the organization appointed a security officer? No Yes Does the organization have formal written Information Security Polices to protect PII and Sensitive Data? No Yes Does the organization have documented disaster recovery procedures in place? No Yes Does the organization have emergency operations procedures in place in the event of an emergency? No Yes Is there a procedure in place to ensure proper access to PII and Sensitive Data? No Yes Does the organization have a process for determining the sensitivity of data? No Yes Does the organization have an incident response procedure to follow in the event of a security breach? No Yes Does the organization have adequate cyber / breach insurance in the event of a breach? No Yes Unknown Are all workforce members required to go through annual security training? No Yes Does the organization use any methods to track who or when someone enters the room(s) where the servers are located? No Yes Is the location(s) where the organization keeps their servers locked at all times? No Yes Does the organization restrict access to the room(s) or location where servers are located? No Yes Does the organization have strong physical controls that prevent unauthorized personnel from accessing the organization's facilities? No Yes Does the organization have documented workstation or computer use policy? No Yes Does the organization protect PII and sensitive data on monitors? No Yes Does the organization perform vulnerability and penetration testing on the network on a periodic basis? No Yes Does the organization track the movement and ownership of portable media? No Yes Do workforce members with laptops take the system home or out of the office? No Yes Are employees required to create a complex password? No Yes Are all the organization's laptops encrypted to protect the data stored on them? No Yes Does the organization have a firewall in place on the network? No Yes Thank you for taking the time to complete this form. Please note that this is a short version of the actual Risk Assessment that we will be preforming. This will give us an idea where your risk is at this time. Site Mailing List The Future of Employee Benefit Administration Vantage Flex, LLC 413 10th Avenue Menominee, MI 49858 Phone: (906) 863-3539 Email: bill@vantageflex.com