HIPAA Security References

IT References

General

• HIPAA Security Policy and Guidelines

Requirement 1: Training and ePHI Security Compliance Policy

• HIPAA Training
• HIPAA ePHI Security Compliance Policy

Requirement 2: Strong passwords

• Guide 1610 GD.01 Selecting Good Passwords

Requirement 4: Securing paper records

• Policy guidelines for physical security

Requirement 5: Secure configuration standards for Yale laptop and desktop computers

• Secure workstation configurations

Requirement 6:  Smartphones and other portable devices

• Secure standards for smartphones and other portable devices

Requirement 7: Thumb drives or other removable media devices

• Yale ITS standards for thumb drives and other removable media devices

Requirement 8: Remote access to Yale systems

• Secure workstation configurations

Requirement 10: Transferring files securely

• ITS Secure File Transfer Facility

Requirement 11: ITS Central File Service

• ITS Central File Service

Requirement 13: Secure removal of paper or electronic PHI

• Guidelines for secure removal or disposal of data

Policies & Procedures

Safeguard 1

• Appropriate Use of IT Systems
• HIPAA Policies
• Encryption implementation procedures (PR1)

Publications

• Faculty Handbook
• Staff Personnel Policies and Practices Manual
• Undergraduate Regulations

IT Support Providers

• ITS Help Desk
  203.432.9000
  helpdesk@yale.edu

Others

• Tracking and Management of HIPAA Business Associates