Limit and Audit Privileged Accounts Sample Clauses

Limit and Audit Privileged Accounts. For any Accounts or Roles that have broad access to information or the ability to modify Information Resource operations (“privileged” accounts or roles), Owners must develop a mechanism to ensure that (a) account creation and use are expressly authorized based on well-defined criteria; (b) accounts are limited to the individuals whose function requires broad privilege; (c) account creation and use is tracked and auditable; and (d) appropriate mechanisms are in place to timely offboard privileged accounts. For example, an employee providing desktop support may need to be able to elevate to administrator- level access on workstations in the group they support, but should not be able to use administrator-level access on workstations in areas of the organization they do not support, nor on servers administered by a separate group.
View SourceView Similar (3)

Related to Limit and Audit Privileged Accounts

  • RECORDS AND AUDIT PROVISIONS ‌‌ 5.1‌‌ ON-SITE AND OFF-SITE REVIEWS/AUDITS The IOP grants the Director, DHA [or authorized representative(s)], the right to conduct on-site or off-site reviews or accounting audits with full access to patients and records. The audits will be conducted on a scheduled or unscheduled (unannounced) basis. This right to audit/review includes, but is not limited to, the right to:‌ (a)‌ Examine fiscal and all other records of the IOP which would confirm compliance with this agreement and designation as an authorized IOP provider. (b)‌ Conduct audits of IOP records including clinical, financial, and census records to determine the nature of the services being provided, and the basis for charges and claims against the United States for services provided to beneficiaries. The Director, DHA, or a designee shall have full access to records of both TRICARE and non-TRICARE patients. Note: In most cases, only TRICARE patients’ records will be audited. Examples of situations where non-TRICARE patient records would be requested may be in situations of differential quality of care assessments or to identify systemic quality and safety concerns. (c)‌ Examine reports of evaluations and inspections conducted by federal, state, local government, and private agencies and organizations. (d)‌ Conduct on-site inspections of the facilities of the IOP and interview employees, members of the staff, contractors, board members, volunteers, and patients, as required. (e)‌ Release copies of final review reports (including reports of on-site reviews) under the Freedom of Information Act (FOIA).

  • Modifications to Contracts and Credit and Collection Policy Such Seller Party will not make any change to the Credit and Collection Policy that could adversely affect the collectability of the Receivables or decrease the credit quality of any newly created Receivables. Except as provided in Section 8.2(d), Servicer will not extend, amend or otherwise modify the terms of any Receivable or any Contract related thereto other than in accordance with the Credit and Collection Policy.

  • Information Access and Audit Rights 25.1 Information Access 25.2 Reporting of Non-Force Majeure Events 25.3 Audit Rights 25.3.1 25.3.2 25.4 Audit Rights Periods 25.4.1 Audit Rights Period for Construction-Related Accounts and Records 25.4.2 Audit Rights Period for All Other Accounts and Records 25.5 Audit Results 25.5.1 26.1 General 26.2 Responsibility of Principal 26.3 No Limitation by Insurance

  • Credit and Collection Policies Comply in all material respects with the Credit and Collection Policy in regard to each Pool Receivable and the related Contract.

  • Audit Provisions The Commonwealth shall have the right, at reasonable times and at a site designated by the Commonwealth, to audit the books, documents, and records of the Parties to the extent that the books, documents, and records relate to the Parties’ compliance with the provisions set forth in subsection (b) above or to the Small Diverse Business or Small Business Commitment effectuated through this Subcontract. The Parties shall preserve such books, documents, and records for a period of three years from the date of final payment hereunder. The Parties shall give full and free access to all such records to the Commonwealth and/or its authorized representatives.