Hellotracks Security Policies, Standards, and Procedures

• Security Program Overview
• Corporate Governance
• Policy Management
• Security Architecture and Operating Model
• Roles, Responsibilities and Training
• Risk Management and Risk Assessment Process
• Compliance Audits and External Communications
• System Audits, Monitoring and Assessments
• HR and Personnel Security
• Access
• Facility Access and Physical Security
• Asset Inventory Management
• Data Management
• Data Protection
• Secure Software Development and Product Security
• Configuration and Change Management
• Threat Detection and Prevention
• Vulnerability Management
• Mobile Device Security and Media Management
• Business Continuity and Disaster Recovery
• Incident Response
• Breach Investigation and Notification
• Third Party Security and Vendor Risk Management
• Privacy Practice and Consent
• Addendum and References
• Appendix A. Employee Handbook
• Appendix B. Approved Software
• Appendix C. Approved Vendors
• Appendix D. Key Definitions
• Appendix E. HIPAA Business Associate Agreement
• Appendix F. HIPAA Controls Mapping
• Appendix G. NIST Controls Mapping
• Appendix H. Privacy Policy
• Appendix I. Cookie Policy
• Appendix J. GDPR Data Processing Agreement