Snapshot 27986
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Welcome to IMO Health's Security and Compliance Program As a provider of point-of-care and data quality management solutions, IMO Health’s priority is to maintain a safe, secure and compliant environment for its customers. To ensure the highest level of security and compliance, IMO Health is continually investing in our overall information security program, resources and expertise. We understand the importance in providing clear information about our security practices, tools, resources and responsibilities within IMO Health so that our customers can feel confident in choosing us as a trusted service provider. Within this portal we provide various information about our compliance controls, policies and useful documentation for your varying risk assessment and assurance activities. IMO Health is committed to transparent and open communication in order to provide you with the ability to make accurate decisions when it comes to your own data security. IMO Health is constantly advancing and improving its security program and policies. We are proud to announce that our SOC2 Type 2 + HIPAA Report is now moving into it's 3rd year of completion and is available for customers and prospects via this portal. Looking for something specific? Search across IMO Health’s security, trust, and compliance program 3 Certifications SOC 2 Type II · 1 Learn MoreRequest Access HIPAA · 1 Learn MoreRequest Access TX-RAMP · 1 Learn MoreRequest Access 17 Policies Application Security ·3 Access Management Policy Software Development Life Cycle Policy Vulnerability Management Policy Data Security and Privacy ·5 AI Governance Policy AI Responsible Use Policy AI Risk Management Policy Data Classification Policy Infrastructure Security ·1 Audit Logging & Monitoring Policy Security Operations ·8 Acceptable Use Policy Business Continuity & Disaster Recovery Policy Device Management Policy Information Security Management System Policy 118 Continuously Monitored Controls AI · 3 AI Governance Policy AI Responsible Use Policy AI Risk Management Applications · 2 Dependency vulnerability monitoring Static Code Analysis Business Operations Process · 27 Access Policy Asset Management Policy Business Continuity / Disaster Recovery Program Control reviews Control selection Cloud Infrastructure · 9 Fault Tolerance Firewalls Infrastructure-as-code Malware detection Network Segmentation Customers · 2 Master Services Agreement Support channel Data · 8 Data Handling Data Input Validation Data Retention Data classification Data in transit encryption IT Infrastructure · 6 Acceptable Use Asset Maintenance Mobile Device Management System Inventory Workstations - OS Identity and Access Control · 6 Automatic account lockout Least-privilege access Multi-factor authentication (MFA) Password Configurations Requesting and approving access Monitoring · 5 Audit Logging Continuous Monitoring Performance monitoring Security Event Logging Software Installation Monitoring Other Controls · 22 API documentation API responses Application Processing Changes Auto-Scaling EC2 instance People · 15 Background checks Board Oversight Board of Directors Confidentiality agreement Disciplinary process Physical Security · 1 Media Inspection Product Delivery Process · 10 Agile Process Backup Plan Backup Storage Change Management - Tracking Change Management Approvals Vendors · 2 Vendor Agreements Vendor Monitoring 2 Trust Leadership We believe that compliance is the responsibility of the entire company, and we have team members at different parts of the company who own and drive our compliance initiatives. Lori KevinVP Security & Compliance Victor GarciaInformation Security and Risk Manager Request Access Interested in Learning More? Request access and we can share more information about our trust and compliance program.