2017-650-E Health - Carolinas IT to conduct HIPAA security risk analysis

Browse Search

DocuSign Envelope ID:88577424-D976-4534-82EF-EEA3A41BAB2A Resources Include: • CISA • Associate Auditors Total Time and Resources Resources are typically available approximately 4-6 weeks from signature Phase Estimated Time Travel& Billing Code* Resource Description Charges Expenses Complete Security Risk Assessment—Two N/A Included Fixed Price CISA $5,000.00 Assessments including One Associate Auditors On-Site Audit *Professional Consulting and any other additional services listed in proposal may be provided ad-hoc for additional charges. Total Charges: $5,000.00 *One additional assessment may be added for a fee of$1,500.00. Client Authorization: DocuSigned by: 12/7/2017 Approved By: �jblabut, Ru.l AKA v�s(,t,li Date: 55799457fC477... __ I Printed Name: Bonnie Hammersley By signing this Statement of Work, the Client understands Carolinas IT Acceptance: the tasks that are in scope and agrees that tasks not listed are considered out of scope. This is a fixed fee engagement. r--DocuSigned by: Customer is responsible paying a minimum of 50% of the Approved By: r avto ('t sbtn, total fee prior to the start of the project, with the balance being billed net 10-days upon completion of the annual on- '--- Printed Printed Name: site report. As indicated in the HIPAA Security Rule, R. Greg Manson assessments should be conducted periodically. We believe best practice is to re-assess at least annually. As such, this SOW may be renewed for HIPAA SRA Basic Services (one scan and on-site audit, one scan with guidance) annually by written amendment duly executed by authorized Date: 11/20/2017 representatives of both parties. Client will be notified of the renewal option at least 30 days in advance. Acknowledgement of Completion: Approved By: Date: Printed Name: Date: Client hereby acknowledges the Services were completed as specified in this Statement of Work. Date: 792094c7-3c00-42b2-aa97-9219813651e8.docx Page 3 of 4 11/20/2017