HS 9453-D Remote Access - Office of Compliance Services - UCLA ...

More documents

Recommendations

Info

Remote Access Policyii.iii.iv.The maximum VPN concentrator session length is 15 hours.HS 9453-DNo Device connected to MedNet via VPN is allowed to serve as aproxy to forward traffic from other devices.When using VPN technology with personal equipment, users mustunderstand that they must comply with all UCLA and UCLA Healthpolicies applicable to devices connected to UCLA networks.Requirements include, but are not limited toa. Operating systems must be kept up to date on patches.b. Anti-virus software must be running and the virus definitionskept up to date.c. If there is a native host-based firewall, it must be enabled.d. Restricted Information must be encrypted.For more information, see the following policies:HS Policy No. 9421, “Workforce Access to and use of PHI(Minimum Necessary)”HS Policy No. 9451, “Use of Electronic Information”HS Policy No. 9453-C, “Storage of Restricted Information onMobile Devices and Removable Media”HS Policy No. 9457, “Minimum Standards for NetworkDevices”UCLA Policy No. 401, “Minimum Standards for NetworkDevices”UCLA Policy No. 404, “Protection of Electronically StoredPersonal Information”II.III.IV.EnforcementFailure to follow any provisions of this policy may result in disciplinary action, upto and including termination.QuestionsWorkforce members should consult their IT support group or the InformationSecurity Office (InfoSecAll@mednet.ucla.edu) if they have any questions on thispolicy.Exceptions to PolicyAny exceptions to these policies must be for a valid patient care or businessreason and must be approved by the Information Security Officer working inconsultation with the appropriate IT groups prior to any remote access.4 of 5 UCLA HealthCompliance Policies and ProceduresPrivacy and Information Security Policies
Remote Access PolicyHS 9453-DREFERENCESHealth Insurance Portability and Accountability Act, 45 CFR 160-164California Medical Information Act, California Civil Code Section 56 et seq.Information Practices Act of 1977, California Civil Code Sections 1798.29 and 1798.82California Health and Safety Code Sections 1280.15 and 130203University of California Business and Finance Bulletin IS-3, Electronic InformationSecurityUniversity of California Electronic Communications Policy (ECP)CONTACTChief Privacy Officer, Compliance OfficeChief Information Security Officer, Compliance OfficeREVISION HISTORYApproved: February 22, 2006Effective Date: April 20, 2005Revised Date: November 2005; June 21, 2007; May 30, 2008, March 31, 2011APPROVALHealth Sciences Enterprise Compliance Oversight BoardApproved 12/11/2010David Feinberg, MDCEO and Associate Vice ChancellorUCLA Hospital SystemRandolph Steadman, MDChief of StaffRonald Reagan UCLA Medical CenterDenise Sur, MDChief of StaffSanta Monica-UCLA Medical Center and Orthopaedic hospitalJames J. McGough, MDChief of StaffResnick Neuropsychiatric Hospital at UCLA5 of 5 UCLA HealthCompliance Policies and ProceduresPrivacy and Information Security Policies
Page 1 and 2: Remote Access PolicyHS 9453-DREMOTE
Page 3: Remote Access PolicyHS 9453-DPROCED

HS 9453-D Remote Access - Office of Compliance Services - UCLA ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?