• A Coding and Billing Vendor would be very IT-intensive handling massive amounts of identifiable information. How should the organization manage this vendor?
• Data transfers and storage will be constantly at risk for unauthorized access. When assessing the risk, what would you want to see in place at the vendor and with all transmissions to and from the vendor? Compliance to with what regulation is at risk?
• Continuity of system functionality will be important. What documents and processes would the risk assessment team want to assess . Compliance to with what regulation may become at risk?