Due diligence
What the written operating model should disclose
These topics should be answered in one version-dated disclosure and carried into the proposal and contract where appropriate.
- Contracting entity and headquarters
- Account-management location
- Delivery-team locations
- Role-based access model
- Device and network controls
- Business associate agreement scope
- Workforce training and confidentiality requirements
- Insurance types and limits
- Audit and incident-escalation process
- Last review date and document owner