500.17(b)(3)—500.17(b)(3)
>Control Description
Each covered entity shall maintain for examination and inspection by the department upon request all records, schedules and other documentation and data supporting the certification or acknowledgment for a period of five years, including the identification of all areas, systems and processes that require or required material improvement, updating or redesign, all remedial efforts undertaken to address such areas, systems and processes, and remediation plans and timelines for their implementation.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.