Documentation/Contract reviewing often starts with a need for missing documentation/contracts to be written, or for existing documentation/contracts to be updated due to changes in the underlying regulations, policies, and/or company requirements. MBM Consulting Services retains subject matter experts [SME's] who can create, edit, and update, any type of documentation or contracts that you need.
MBM Consulting Documentation/Contract -Two-Phase Approach
The review cycle described here for new and updated documentation/Contracts, consists of a two-phase review.
- In the first phase, known as development review, an MBM Consultant (subject matter expert), someone who has demonstrated real competence in the subject, [i.e., HIPAA, HITECH, PCI-DSS, BSA/AML, etc.] will review to ensure the documentation/contracts are following any regulatory requirements for compliance in a particular area. [i.e., HealthCare, Financial, Government, Utilities, etc.]. Those areas that are not included or needs improved will be annotated by the MBM Consultant and discussed during the phone review with the customer. During the first phase, the customer and the subject matter expert may work informally to improve the draft documentation/contracts.
- In the second phase, known as validation, the development-reviewed draft now deemed to meet all appropriate regulatory and/or company contract requirements, and are accurate and complete are formally provided to the customer who validates the content of the draft.The second phase is more formal than the first, ending either in an issue being filed against the documentation/contracts under review, or in the documentation/contracts being designated as valid with respect to the particular appropriate regulation and/or company contract requirements.
Development Review
The goal of development review is to produce documentation/contracts that are regulatory compliant and complete with respect both to the scope of the document/contract under review and also to any underlying regulation. Development review is carried out on an individual document/contract, or specified parts of a document/contract.
Development review begins when the subject matter expert assigned to carry out the review begins reviewing the draft document/contract.
Development review ends when all subject matter expert comments have been handled and the results integrated into the draft. At the end of development review, the documentation/contracts are ready for validation.
Validation
The goal of validation is to verify that the documentation/contracts that are under review have met all necessary regulatory requirements with respect to a particular version of a Federal, State, or company contract requirement.
Validation begins when the writer formally marks the document/contract as FIXED (ready for validation by the customer) and is returned to the customer for final validation. For a document/contract that includes sections [any particular part of the document/contract] not all going into review simultaneously, validation also requires that the particular section be identified.
Validation ends when the customer either finds the document/contract valid, noting that it is valid through email correspondence with the MBM Consultant, or finds the document/contract invalid. In the latter case, the customer identifies the issues through email correspondence, so that the updates/additions can be resolved in the same manner as originally agreed.
Contact MBM Consulting and discuss with one of our subject matter experts about updating your current companies Information Security documentation and/or contracts. Call us today and get started ensuring your documents and contracts are current.
