Security - HIPAA

• HIPAA: Final Standards for Privacy of Individually Identifiable Health Information (20 December 2000, 1500 pages, PDF file)
• HIPAA: Security and Electronic Signature Standards. (In PDF.) The proposed regulation on security practices and digital signature standards under HIPAA.
• Aug 22, 2001. National Governor's Association letter to the Congress requesting reasonable and sufficient extension of time period to be HIPAA compliant.
• AAMC information on HIPAA. Locally cached Guidelines for Academic Medical Centers on Security and Privacy, Sample Policies and Contracts.
• HIPAA Transactions and code sets - Official publisher of guides
• FDA Computerized Systems Used In Clinical Trials - Locally cached PDF file

HIPAA Security Project

• HIPAA Regulation, and other information
• HIPAA Security regulation
• New York State HIPAA Guideline
• Policies, procedures, documents - November 15, 2007
  • List of all documents
  • Policies
  • Information Security Management Process
  • Information Access Management and Control
  • General Information Security
  • Information Security: Audit and Evaluation
  • Workstation Use and Security
  • Workforce Security Clearance, Termination and Authorization
  • Information Security: Backup, Device and Media Controls
  • Information Security: Facility Access Control and Security
  • Information Security: Disaster Contingency and Recovery Plan
  • Information Security Incident Procedure
  • Sanctions Policy
  • Standards
  • Information security risks standard
  • Documents
  • EPHI Assets with less than 20 users:
  • Information Security Risk Questionnaire and Documentation (Limited Access)
  • EPHI Assets with more than 20 users:
  • Information Security Risk Questionnaire
  • Collection of application documents
  • Return to: security@cumc.columbia.edu
  • Procedures
  • Center-wide Identifier (CWID) Creation Procedure
  • Termination and Account Inactivation Procedure
  • Guidances
  • Good Password Guidance