Question drchrono’s thoughts Comments Initials We hope so! Do I have basic office security in place, such as locked doors and windows, and an alarm system? Are they being used properly during working and hours? Are my desktop computing With drchrono’s features, this systems in areas that can be should not be an issue. secured during non-working hours? Make sure to verify the Are my desktop computers physical location of any out of reach of patients and new equipment you other personnel not may purchase as part of employed by my practice your implementation. during normal working hours? Again, drchrono’s Is mobile equipment (e.g. website and iPad laptops), used within and platforms have outside my office, secured functionality, so to prevent or loss? PHI is secure. Do I have a documented Any activity is recorded in the Audit Log, but inventory of approved and since drchrono is known health IT computing your users can equipment within my access it from practice? Will I know if one anywhere, regardless of my employees is using a of physical computing computer or media device equipment locations. not approved for my practice? With drchrono’s Do my employees features, this implement basic computer should not be an issue. security principles, such as logging out of a computer before leaving it unattended? Identifying Technical Safeguards
Question drchrono’s thoughts Comments Initials Do I have basic office security in place, such as locked doors and windows, and an alarm system? Are they being used properly during working and hours? We hope so! Are my desktop computing systems in areas that can be secured during non-working hours? With drchrono’s features, this should not be an issue. Are my desktop computers out of reach of patients and other personnel not employed by my practice during normal working hours? Make sure to verify the physical location of any new equipment you may purchase as part of your implementation. Is mobile equipment (e.g. laptops), used within and outside my office, secured to prevent or loss? Again, drchrono’s website and iPad platforms have functionality, so PHI is secure. Do I have a documented inventory of approved and known health IT computing equipment within my practice? Will I know if one of my employees is using a computer or media device not approved for my practice? Any activity is recorded in the Audit Log, but since drchrono is your users can access it from anywhere, regardless of physical computing equipment locations. Do my employees implement basic computer security principles, such as logging out of a computer before leaving it unattended? With drchrono’s features, this should not be an issue. Identifying Technical Safeguards
drchrono_s_Privacy_and_Security_guide.docx