in the survey. The data submitted must include an SID for each patient included in the sample, regardless of whether the sample member completed the survey. More information about assigning a unique SID to each sampled patient is included in Chapter IV. Even though only de-identified data will be submitted to the OAS CAHPS Data Center, every measure will be taken to protect and secure OAS CAHPS data. Ensuring data security was a concern and consideration during the design and development of the OAS CAHPS web portal. The web portal balances a straightforward and flexible design with the need to protect the privacy and security of OAS CAHPS data. Data are encrypted whenever vendors upload their data files. The OAS CAHPS Survey Coordination Team has implemented a number of policies and procedures to ensure that all communications and transfers are secure. Among these measures are the following: requiring that each individual provided access to the private links on the web portal must have a secure login; requiring users to create and use a password; strong using Secure Sockets Layer (SSL) technology to encrypt files for transmission; and carefully monitoring uploads, upload attempts, and web portal use in general. When users log into the private links on the web portal, the system will automatically check and authenticate their credentials before allowing access. This ensures that only authorized users log into the system. In addition to allowing only credentialed users access to the private links on the web portal, all electronic data are stored behind a firewall in a password-protected network. All data traffic between the vendor’s network and the Internet pass through this single connection point. This process provides the same level of protection and monitoring to all systems connected to the vendor’s network. The web portal firewall is programmed to allow or prevent access to the network by using a set of rules to determine whether attempted network access is in compliance with the OAS CAHPS Data Center’s network security policy. In addition, the firewall logs all incoming traffic to help detect and analyze any problems or suspicious activity. Survey Vendor’s Web Portal Security Responsibilities All OAS CAHPS survey vendors must go through an application and certification process to participate in the survey. In addition, vendors must agree to strict requirements to continue their participation. By following the security procedures identified for the project, survey vendors will protect their client HOPDs’ and ASCs’ data and those of other vendors participating in OAS CAHPS.
in the survey. The data submitted must include an SID for each patient included in the sample, regardless of whether the sample member completed the survey. More information about assigning a unique SID to each sampled patient is included in Chapter IV. Even though only de-identified data will be submitted to the OAS CAHPS Data Center, every measure will be taken to protect and secure OAS CAHPS data. Ensuring data security was a concern and consideration during the design and development of the OAS CAHPS web portal. The web portal balances a straightforward and flexible design with the need to protect the privacy and security of OAS CAHPS data. Data are encrypted whenever vendors upload their data files. The OAS CAHPS Survey Coordination Team has implemented a number of policies and procedures to ensure that all communications and transfers are secure. Among these measures are the following: requiring that each individual provided access to the private links on the web portal must have a secure login; requiring users to create and use a strong password; using Secure Sockets Layer (SSL) technology to encrypt files for transmission; and carefully monitoring uploads, upload attempts, and web portal use in general. When users log into the private links on the web portal, the system will automatically check and authenticate their credentials before allowing access. This ensures that only authorized users log into the system. In addition to allowing only credentialed users access to the private links on the web portal, all electronic data are stored behind a firewall in a password-protected network. All data traffic between the vendor’s network and the Internet pass through this single connection point. This process provides the same level of protection and monitoring to all systems connected to the vendor’s network. The web portal firewall is programmed to allow or prevent access to the network by using a set of rules to determine whether attempted network access is in compliance with the OAS CAHPS Data Center’s network security policy. In addition, the firewall logs all incoming traffic to help detect and analyze any problems or suspicious activity. Survey Vendor’s Web Portal Security Responsibilities All OAS CAHPS survey vendors must go through an application and certification process to participate in the survey. In addition, vendors must agree to strict requirements to continue their participation. By following the security procedures identified for the project, survey vendors will protect their client HOPDs’ and ASCs’ data and those of other vendors participating in OAS CAHPS.