• Incidents caused by third party

Preparation Phase:
• Implementing and reviewing service level agreements.
• Auditing third parties.
• Testing third-party data breach scenarios.

Detection and Analysis Phase:

• Coordinating with the third party during the investigation.
• Escalating the incident within internal reporting processes.
• Assisting the third party in all communications and notifications.
• Ensuring third-party actions adhere to legal requirements.

Containment, Eradication, and Recovery Phase:

• Assisting with digital forensics to preserve evidence.
• Ensure impact of affected any individual or others.
• Complete scanning of systems in between third parties.
• Managing the third-party activities, and checking performance
against service level agreements.

Post-incident Activity:
• Updating any contractual documents and service level agreements.
• Incorporating third-party incidents into healthcare organization
training.
• and awareness as well as incident response team training
scenarios.
• Patient rights and Healthcare responsibilities – Click Here