Documented Process. Owners must ensure that there is a documented process for approving, creating, modifying, monitoring, and terminating accounts and/or Roles in the Information Resource. Such process must account for: a. Defining who can approve the creation of new Roles and types of accounts; b. Defining who can approve the creation of new accounts for individuals, modifying existing accounts, and terminating accounts; c. Defining how monitoring of accounts in and access to the Information Resource occurs; and d. Defining the conditions under which accounts and Roles can be created, enabled, modified, disabled, and/or removed. In addition, the process should identify the roles of one or more individuals responsible for approving, administering, monitoring, and terminating access to the Information Resource. The individual(s) must be readily identifiable upon request. If the individual(s) are not, that role will default to the applicable ACIO.
Appears in 3 contracts
Sources: Primary Care Accountable Care Organization Contract, Primary Care Accountable Care Organization Contract, Primary Care Accountable Care Organization Contract