Skip to Content

Provider Manual

Provider System Outages and or Material Breach

Last Updated on October 06, 2026

Security Health Plan requires all contracted HIPAA covered entities and their business associates to develop and maintain an emergency preparedness communication plan. The emergency preparedness communication plan must have a system in place that provides timely notification to Security following a material breach or system outage. 

Security Health Plan requires the communication plan to provide, at a minimum, the following topics:

  • Immediate notification of incident to Security Health Plan’s Provider Network Management Team
  • Security Health Plan with primary contacts throughout the duration of the incident
  • Initial details of the incident including:
    • Anticipated member impact
    • Anticipated Health Plan impact
    • Restoration time frame
  • Communication related to the below areas of operation to define how operation of systems has been affected in order for Security Health Plan to provide feedback for temporary work around for:
    • Medical management for inpatient and outpatient
    • Vendor authorization management (i.e. Prime Therapeutics Management, Navi Health, eviCore, Northwood)
    • Claim submissions
    • Retro review audits
    • Medical record request
  • Security Health Plan weekly updates of incident downtimes based on impact to operations

Security Health Plan requirements may be modified based on provider partner incident severity.