SmartWorxLoading your starting point…
Define the deployment boundary, control access to the work, and keep the evidence needed to review it. SmartWorx brings a shared platform foundation to that evaluation.
SmartWorx’s hosting model allocates application resources to your organization. Plan dedicated environment capacity around the workload, rather than placing every customer’s work in one shared resource pool.
Agree the environment boundary, deployment requirements, and integration paths. Resource ownership supports capacity planning; isolation, permissions, and operational controls remain part of the security assessment.
Explore environment capacityTurn the requirements into a reviewable application and deployment plan.
Define the environment, region, capacity, data types, and external systems within the evaluation boundary.
Review enterprise identity, managed sessions, administrative responsibilities, and the onboarding arrangements for your people.
Map roles and security profiles to record scope, field access, and supported application operations.
Identify the events, actor attribution, review access, retention, and event coverage your organization needs.
Review encryption in transit and at rest, credentials handling, exports, and the information lifecycle.
Define each connection’s identity, permissions, data direction, supported operations, and external-provider responsibilities.
Agree the architecture, configuration, control evidence, and service information needed for your assessment.
Confirm contractual obligations, access arrangements, recovery objectives, and any authorization requirements for the intended boundary.
Use roles and security profiles to describe the access each actor needs. Review record, field, and component permissions with the people accountable for the process.
Test representative tasks and exceptions with synthetic information before introducing regulated data.
Explore the permission model| Entity | Read | Update | Delete |
|---|---|---|---|
| Service Requests | Business Unit | Business Unit | None |
| Customers | All | None | None |
| Approvals | Business Unit | Business Unit | None |
Keep responsibilities, supporting information, and review decisions connected.
Coordinate mission work, readiness, assets, approvals, and operational handoffs within defined access and integration boundaries.
Explore the solutionCoordinate care operations, research, documents, equipment, and administrative work around the systems already in place.
Explore the solutionSecurity architecture and control mapping can inform the review. Confirm the evidence and contractual requirements for the actual workload and deployment.
Platform design and cloud provider certifications do not establish government authorization, healthcare compliance, or clinical validation for a customer application.