All vendors who provide any of the following to a Covered Entity, which include all state agencies, must be compliant:
-
- Cloud technology, including hosting, SaaS, IaaS, PaaS, and Commercial Off-the-Shelf (COTS) products.
- Product(s) with cloud components and/or functionality that touches the cloud.
- Service(s) with cloud components and/or functionality that touches the cloud.
See also, How Does IOT Define the Cloud.