"[T]he proposed rule would require regulated entities to: [1] Maintain an accurate and thorough inventory of their technology assets and create a network map of their electronic information systems, which must be updated at least every 12 months.... [2] Conduct vulnerability scanning at least every six months ... [4] Verify business associate/subcontractor technical safeguards at least every 12 months ... [5] Establish and implement a written contingency plan that includes procedures for data backups, disaster recovery, and emergency mode operations."  MORE >>