Customer Notice: COVID-19

Dear Customers,

As the risk has increased due to the Coronavirus (COVID-19) we wanted to let you know what recent steps ControlCase has taken. These most recent actions went into effect on 15 March 2020.

Based on guidance from the World Health Organization and country travel restrictions, we have upgraded our actions, per our Business Continuity Plan, with specific steps to account for the increased risk level of COVID-19.

Being a cloud-based SaaS company, you can be assured that the performance of our portal, certification services, and other compliance services will not be impacted. As the situation continues to develop, we have expanded our already heavily virtualized workforce to work from home as a precaution. Since ControlCase already uses a high number of remote workers, we are confident we can continue to deliver the high-quality sales, service delivery, and customer service you have come to expect from us. Our customer success managers (CSM) and project managers (PM) are available to assist you around the clock. For assistance please open a ticket in our portal.

In the current environment, the health and safety of our employees, customers, and partners are our greatest concern.

We have suspended all employee travel, both international and domestic effective 15 March 2020. Additionally, we have instructed employees to maximize the use of technology and conduct internal and external meetings virtually as much as possible.

ControlCase will conduct all scheduled onsite audits remotely until 1 March 2022. ControlCase will re-assess the risk at that time and send out a notification.

Your assigned CSM or PM will be contacting you shortly to reschedule your onsite to a virtual onsite. During this virtual onsite we may ask your staff to use GoToMeeting, WebEx, or video to capture evidence for physical security controls and other controls that typically requires a physical presence to validate. We will complete all standard tasks of an onsite assessment. We will request you upload that video as evidence against the applicable question.

Many assessment and accreditation bodies have already provided guidance on conducting virtual onsite assessments and ControlCase is prepared to document the virtual onsite so that it does not affect your assessment or certification.

Please see below for guidance we have received to date:

• PCI:
  • https://www.pcisecuritystandards.org/covid19
  • https://blog.pcisecuritystandards.org/remote-assessments-and-the-coronavirus
• HITRUST:
  • https://go.hitrustalliance.net/webmail/474962/
• ISO:
  • http://nabcb.qci.org.in/NABCB Policy on Management of Extraordinary Events or Circumstances – Is….pdf

This is a challenging time for everyone, and the situation is changing daily. We are committed to maintaining our business operations and ensuring you continue to receive the highest quality service without disruption. We will continue to update our business continuity plan as more information becomes available.

For additional health and safety information regarding the Coronavirus please refer to the World Health Organization (WHO) and Centers for Disease Control and Prevention (CDC) guidelines (www.who.int and www.cdc.gov).

Sincerely,

Mike Jenner
ControlCase Chief Executive Officer