A healthcare organization recently acquired another firm that outsources its patient information processing to a third-party Software as a Service (SaaS) provider. From a regulatory perspective, which of the following is MOST important for the healthcare organization to determine?

A healthcare organization recently acquired another firm that outsources its patient information processing to a third-party Software as a Service (SaaS) provider. From a regulatory perspective, which of the following is MOST important for the healthcare organization to determine?
A . Cybersecurity risk assessment methodology
B . Encryption algorithms used to encrypt the data
C . Incident escalation procedures
D . Physical location of the data

View Answer

Answer: C