Information System Activity Review 3 12/9/14 Assigned Security Responsibility 3 12/9/14 Workforce Member Security 2 9/18/12 Information Access Management 3 12/9/14 Suspension and Termination Procedures 4 12/9/14 Security Awareness and Training 1 1/20/12 Security Reminders 1 1/20/12 Malicious Software 1 1/20/12 Log-In Monitoring and Automatic Log-Off 2 9/18/12 Password Management 2 3/12/13 Contingency Plan 3 12/9/14 Data Backup Plan and Disaster Recovery Plan 2 9/18/12 Emergency Mode Operation Plan 1 1/20/12 Applications and Data Criticality Analysis 2 9/18/12 Physical Safeguards Facility Access and Security 2 9/18/12 Workstation Use and Security 1 1/20/12 Device and Media Controls 2 9/18/12 Technical Access Controls 2 3/12/13 Integrity 2 9/18/12 Person or Entity Authentication 3 3/12/13 Transmission Security 2 12/9/14 Availability 1 1/20/12 Operational Policies Subpoena Response 1 1/20/12 ConnectVirginia EXCHANGE ConnectVirginia EXCHANGE Permitted Purposes 2 12/9/14 ConnectVirginia EXCHANGE Node Eligibility Criteria 1 9/18/12 ConnectVirginia EXCHANGE Application Review Policy 2 12/9/14 ConnectVirginia EXCHANGE Node Suspension and Termination 2 12/9/14 Dispute Resolution Process 1 9/18/12 Consent 3 12/9/14 Auditing and Monitoring 1 9/18/12 Sensitive Data 2 12/9/14 ConnectVirginia’s Use and Disclosure of PHI in ConnectVirginia EXCHANGE 2 12/9/14
Agreements with ConnectVirginia EXCHANGE Nodes 2 12/9/14 ConnectVirginia EXCHANGE Fees 2 12/9/14 ConnectVirginia Portals ConnectVirginia Portal User Information Confidentiality 1 12/9/14 Agreements with ConnectVirginia Portal Participants and Users 1 12/9/14 ConnectVirginia Portal Participant Enrollment 1 12/9/14 ConnectVirginia Portal User Roles 1 12/9/14 ConnectVirginia’s Use and Disclosure of PHI in ConnectVirginia Portals 1 12/9/14 ConnectVirginia Portal Auditing, Monitoring and Attestations of Compliance 1 12/9/14 ConnectVirginia Portal Participant Suspension 1 12/9/14 ConnectVirginia Portal User Suspension and Termination 1 12/9/14 ConnectVirginia Portal Log-in and Log-off 1 12/9/14 ConnectVirginia Portal Password Management 1 12/9/14 ConnectVirginia Portal Help Desk 1 12/9/14 ConnectVirginia Portal Training 1 12/9/14 Breach and Security Incident Response Procedures for Portal Participants and Users 1 12/9/14 Use of the CVEAM Portal 1 12/9/14 Deletion of ConnectVirginia Encounter Alert Reports 1 12/9/14 Use of the Patient Search Service through the STREAMLINE Portal 1 12/9/14 Establishing a Relationship in the STREAMLINE Portal 1 11/16/15 ConnectVirginia Public Health Reporting Pathway Certificate Validation 1 2/4/14 Agreements with Registrants 1 2/4/14 ConnectVirginia Public Health Reporting Audit Requests 1 2/4/14 ConnectVirginia Registrant Onboarding 2 12/9/14
Responsibility: ConnectVirginia, Portal Participants and Users ConnectVirginia Operational Policy for ConnectVirginia Portals Policy No: PORT-7 Title: ConnectVirginia Portal Participant Suspension Version: 1 Effective Date: 12/9/14 Purpose Statement: The ConnectVirginia Portal Master Service Agreement allows ConnectVirginia or Participants to suspend a Participant’s access to the ConnectVirginia Portals. This policy sets forth the process by which such suspensions may occur. Policy/Procedure: Voluntary Suspension by a Portal Participant A Portal Participant may suspend its own to access a ConnectVirginia Portal(s) by notifying the ConnectVirginia Help Desk of such suspension. If a Portal Participant suspends its own right to access a ConnnectVirginia Portal(s), the access rights of its Portal Users will also be suspended. When notifying ConnectVirginia of a suspension, the Portal Participant should specify the reason for, the commencement date of, and the duration of the voluntary suspension. At the conclusion of the Portal Participant’s voluntary suspension, the Portal Participant will notify the ConnectVirginia Help Desk that the Portal Participant no longer requires a voluntary suspension and is ready to resume accessing and using the ConnectVirginia Portal(s). Once the Portal Participant has notified the ConnectVirginia Help Desk, the Portal Participant and the Participant’s Users may begin accessing and using the ConnectVirginia Portal(s). The ConnectVirginia Help Desk will keep a log of all voluntary suspensions including the Portal Participant name, the dates of the voluntary suspension and the reason for the voluntary suspension. Suspension by ConnectVirginia ConnectVirginia may suspend a Portal Participant’s ability to use a ConnectVirginia Portal(s) to the extent necessary to address the threat by the Portal Participant if ConnectVirginia determines any of the following: A Portal Participant fails to meet the eligibility criteria set forth in the ConnectVirginia Portal Participant Enrollment Policy (PORT-3); A Portal Participant’s acts or omissions materially breached the ConnectVirginia Portal Master Service Agreement;