Fanizza Tahir - Patient Records and Archive - Workbook (2).xlsx

	A	B
1	Engagement Charter

2
3	Client	Cumberland Claims Services
4	Engagement	Patient Records and Archive
5	Consultant	Fanizza Tahir
6	Date	October 12, 2026
7
8	1. What this engagement covers	The patient records and archive service: the seven-year archive store and the process for getting records out of it. This covers the archive server, the archive database and the database host it sits on, the Records Request Portal, the file server where the monthly export lands, the backup repository and offsite replication, and the dormant 2021 cloud account. It also covers the fifteen records staff, and the outside companies involved: the scanning firm, the offsite backup provider, and any outside connection that reaches this service.
9
10	2. What this engagement does NOT cover	The other three services: Claims Intake, Payments and Remittance, and Remote and Corporate. These are scheduled for later quarters. Shared systems like the database host are only assessed for how they affect this service. This engagement does not fix anything, buy anything, or test anything by trying to break in.
11
12	3. What you will deliver	An executive summary for Ray Okafor, the chief operating officer The assessment workbook: the asset inventory, the findings register, and the ranked risk picture A ten-slide presentation Meridian’s security questionnaire, answered, with the evidence behind each answer
13
14	4. By when	By December 7, 2026, eight weeks from the start of this engagement.
15
16	Three predictions (sealed until Project 5, nobody marks these)
17	Prediction 1	There is no single up-to-date list of the systems in this service, and the two records I build it from will not match.
18	Prediction 2	Some people who left the company still have accounts, and nobody can show when access was last reviewed.
19	Prediction 3	Updates get installed, but there is no log showing what was patched, on which machine, or when.
20	Which are you least sure about, and why?	Prediction 2. Access was reviewed in 2024, so leavers may already be removed. The question is whether it is written down anywhere, and I cannot know that until I see the records.
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100