Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
physical_security [2016/02/29 15:05]
jillian_nadette_de_leon
physical_security [2016/03/16 18:09]
jillian_nadette_de_leon
Line 1: Line 1:
 ##PHYSICAL SECURITY ##PHYSICAL SECURITY
-  *Pre-deployment site assessment shall be conducted and the computers to be installed shall be fixed in one place and not portable.\\ 
-  *The area for data collection and processing shall be separate from the server room.\\ 
-  *The IT room shall only be accessible to authorized personnel and to personnel involved during quality assurance monitoring and HICC for monitoring.\\ 
  
 **COMPUTER ACCESS**\\ **COMPUTER ACCESS**\\
-  * Pre-deployment site assessment shall be conducted and computers to be installed shall be non-portable and fixed in one place. Computers shall be accessible to authorized personnel only and role-based system access shall be implemented. Each user shall have one account only. Multiple accounts per user are not allowed. A person requesting for access to a computer shall fill-out a request form. +  * Pre-deployment site assessment shall be conducted and computers to be installed shall be non-portable and fixed in one place. Computers shall be accessible to authorized personnel only and role-based system access shall be implemented. Each user shall have one account only. Multiple accounts per user are not allowed. A person requesting for access to a computer shall fill-out a request form. \\ 
 +  * Anti-glare filters on computer monitors shall be installed. This will not only help reduce glare, but also prevent anyone from seeing what is on the screen unless directly in front of the computer.\\
  
 //​Applications.//​ Only applications for the hospital information system shall be installed in the computer system. Other applications,​ most especially social media applications are strictly not allowed. ​ //​Applications.//​ Only applications for the hospital information system shall be installed in the computer system. Other applications,​ most especially social media applications are strictly not allowed. ​
Line 20: Line 18:
 **OTHER DEVICES**\\ **OTHER DEVICES**\\
    * Facility-registered electronic devices shall not be brought outside the hospital premises except under circumstances such as disasters and vaccinations. USB devices shall be limited to office use but as may be practical, shall not be used.\\    * Facility-registered electronic devices shall not be brought outside the hospital premises except under circumstances such as disasters and vaccinations. USB devices shall be limited to office use but as may be practical, shall not be used.\\
 +   * Mobile devices used for job responsibilities are subject to audits even if an employee owns it.\\
  
   * Capturing of patient data using camera phones and bringing of electronic devices such as cellular phones, laptops, tablets, and cameras inside the medical records area is strictly not allowed.\\   * Capturing of patient data using camera phones and bringing of electronic devices such as cellular phones, laptops, tablets, and cameras inside the medical records area is strictly not allowed.\\