4. Ability to document that the 2, 3, 5, 7, 11 Steps 2, 3, 5, 7, 11 information governance program includes its information management and information control policies and procedures. 5. Ability to: Steps 2, 3, 5, 7, 11 Steps 2, 3, 5, 7, 11 document the principles and processes that govern the information governance program accurately and completely record the activities undertaken to implement the information governance program and respond to authorized interested party in a timely manner. See – Availability #1 6. Ability to have procedures put in Steps 2, 3, 4, 7, 8, Steps 2, 3, 4, 5, 7, 8, 9, 11 place to control access to protected 9, 11 information, whether it relates to the confidentiality of information or the confidentiality of proprietary processes. See Protection #6, #7 – and #8 7. Ability to create and manage the Steps 3, 11 Steps 3, 11 records documenting an organization’s information governance program, to ensure its structure, processes, and practices are transparent, understandable, and available as defined by organizational policies and jurisdictional laws (e.g., in time, appropriate requestors, etc.). See Accountability #3 and #4 – 8. Ability of an organization to ensure Steps 3, 11 Steps 3, 11 that stakeholders are made of how health information is created, acquired, collected, maintained, used, shared and disclosed. See – Availability ##1-9, #14 and #16 9. Ability to demonstrate Steps 3, 11 3, 11 transparency through clear descriptions of the uses and sharing of identified, de-identified and information on an individual, or aggregate healthcare information. See Availability ##1-9, – #14 and #16; Protection #3
4. Ability to document that the information governance program includes its information management and information control policies and procedures. 2, 3, 5, 7, 11 Steps 2, 3, 5, 7, 11 5. Ability to: document the principles and processes that govern the information governance program accurately and completely record the activities undertaken to implement the information governance program and respond to authorized interested party in a timely manner. – See Availability #1 Steps 2, 3, 5, 7, 11 Steps 2, 3, 5, 7, 11 6. Ability to have procedures put in place to control access to protected information, whether it relates to the confidentiality of information or the confidentiality of proprietary processes. – See Protection #6, #7 and #8 Steps 2, 3, 4, 7, 8, 9, 11 Steps 2, 3, 4, 5, 7, 8, 9, 11 7. Ability to create and manage the records documenting an organization’s information governance program, to ensure its structure, processes, and practices are transparent, understandable, and available as defined by organizational policies and jurisdictional laws (e.g., in time, appropriate requestors, etc.). – See Accountability #3 and #4 Steps 3, 11 Steps 3, 11 8. Ability of an organization to ensure that stakeholders are made of how health information is created, acquired, collected, maintained, used, shared and disclosed. – See Availability ##1-9, #14 and #16 Steps 3, 11 Steps 3, 11 9. Ability to demonstrate transparency through clear descriptions of the uses and sharing of identified, de-identified and information on an individual, or aggregate healthcare information. – See Availability ##1-9, #14 and #16; Protection #3 Steps 3, 11 3, 11
AHIMAChecklistUse_Cases_08-22-16.docx