sync: auto-sync from HOWARD-HOME at 2026-05-14 18:54:09

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-14 18:54:09
This commit is contained in:
2026-05-14 18:54:10 -07:00
parent e29ed50cd9
commit 4b667db1ab
6 changed files with 135 additions and 0 deletions

View File

@@ -245,3 +245,27 @@ The caregiver phone infrastructure is now correctly wired end-to-end:
**BAA status:** Docs show both BAAs still open (Microsoft BAA "Not signed", ALIS BAA "Not verified"). Howard believed these may have been done previously — no session log or doc confirms completion. Keeping as open items until verified with Meredith.
**Syncro ticket #32214 updated:** Comment posted (ID 411033290) with full session summary and remaining open items.
---
## Update: ~18:00 PT — BAA verification and doc cleanup
**Microsoft BAA resolved:** Howard opened M365 Admin Center > Settings > Org Settings > Security & privacy — no HIPAA BAA option present. Investigated: the explicit BAA acceptance page only exists for Enterprise Agreement / volume licensing tenants. Cascades is on a Business plan under the Microsoft Customer Agreement (MCA), which automatically includes the HIPAA BAA as part of the Online Service Terms. No separate acceptance is required or available. Gap #13 closed.
Updated in:
- `docs/security/hipaa.md` — gap #13 marked resolved, quick-wins item struck through
- `docs/security/hipaa-caregiver-controls.md` — Microsoft BAA line updated
- `docs/cloud/m365.md` — BAA status and gap #12 updated
**ALIS BAA:** Still open. No session log or document confirms a signed BAA with Medtelligent. Meredith to check if Medtelligent provided a signed copy at contract time; if not, request one from Medtelligent support.
**Final open items before real caregiver rollout:**
| Item | Owner |
|---|---|
| ALIS BAA — check with Meredith / Medtelligent | Meredith |
| Create caregiver AD accounts in OU=Caregivers; add each to SG-Caregivers | Howard |
| Update ALIS staff-record Email = Entra UPN per caregiver | Meredith / ALIS admin |
| Reliable Agency per-person accounts (need individual names) | Hold |
| Ederick Yuzon first-name spelling confirmation | Meredith (email) |
| Stale vault entries: howard-enos-pilot.sops.yaml, pilot-test-user.sops.yaml | Howard |