What are "Class A" Companies?
A "Class A" company is a Covered Entity with at least $20 million in gross annual revenue in each of the last two fiscal years from the entirety of its business operations AND that either:
a) averaged over 2,000 employees over the last two fiscal years; OR
b) has over $1 billion in gross annual revenue in each of the last two fiscal years from all its business operations
These Covered Entities are also required to design and conduct independent audits of its cybersecurity program based on its risk assessment
Further, to monitor privileged access activity by implementing certain access controls
In addition, they are required to implement detection and response solutions to monitor unusual activity, while using a centralized solutionf or system logging and security event alerts.