Copper Mountain will evaluate each vendor’s level of risk, require them to attest to their compliance with HIPAA, and find which protections are in place so your organization can make a determination around how to adjust your contracts, service levels, or your overall relationship. Copper Mountain will then actively monitor each vendor, communicate the security gaps identified, and alert the covered entity of any changes to the vendor’s status over time.