Common use of Reporting of Security Incidents Clause in Contracts

Reporting of Security Incidents. The Business Associate shall track all Security Incidents. The Business Associate shall reasonably use its own vulnerability assessment of damage potential and monitoring to define levels of Security Incidents and responses for Business Associate's operations. However, the Business Associate shall expediently notify the Covered Entity's Privacy Official of any Security Incident, which would constitute a Security Event as defined by this Agreement, including any Breach of system security under T.C.A. § 47-18-2107, in a preliminary report within five (5) business days of any unauthorized acquisition including, but not limited to, use, disclosure, modification, or destruction of PHI by an employee or otherwise authorized user of its system of which it becomes aware with a full report of the incident within ten (10) business days of the time Business Associate became aware of the incident. 3.5.1. Business Associate shall identify in writing key contact persons for administration, data processing, marketing, information systems, and audit reporting. Upon request, Business Associate shall notify Covered Entity of any reduction of in-house staff persons during the term of this Agreement in writing within ten (10) business days.

Reporting of Security Incidents. The Business Associate shall track all Security Incidentssecurity incidents as defined by HIPAA. The Business Associate shall reasonably use its own vulnerability assessment of damage potential and monitoring to define levels of Security Incidents and responses for Business Associate's ’s operations. However, the Business Associate shall expediently notify the Covered Entity's ’s Privacy Official Officer of any Security Incident, Incident which would constitute a Security Event as defined by this Agreement, including any Breach “breach of system the security of the system" under T.C.A. § 47-18-2107, in a preliminary report within five (5) business days of any unauthorized acquisition including, but not limited to, use, disclosure, modification, or destruction of PHI by an employee or otherwise authorized user of its system of which it becomes aware with a full report of the incident within ten (10) business days of the time Business Associate it became aware of the incident. 3.5.1. 3.5.1 Business Associate shall identify in writing key contact persons for administration, data processing, marketing, information systems, systems and audit reporting. Upon request, Business Associate shall notify Covered Entity of any reduction of in-house staff persons during the term of this Agreement in writing within ten (10) business days.

Reporting of Security Incidents. The Business Associate shall track all Security Incidents. The Business Associate shall reasonably use its own vulnerability assessment of damage potential and monitoring to define levels of Security Incidents and responses for Business Associate's operations. However, the Business Associate shall expediently notify the Covered Entity's Privacy Official of any Security Incident, which would constitute a Security Event as defined by this Agreement, including any Breach of system security under T.C.A. § 47-18-2107, in a preliminary report within five (5) business days of any unauthorized acquisition including, but not limited to, use, disclosure, modification, or destruction of PHI by an employee or otherwise authorized user of its system of which it becomes aware with a full report of the incident within ten (10) business days of the time Business Associate became aware of the incident. 3.5.1. Business Associate shall identify in writing key contact persons for administrationadministrati on, data processing, marketing, information systems, and audit reporting. Upon request, Business Associate shall notify Covered Entity of any reduction of in-house staff persons during the term of this Agreement in writing within ten (10) business days.