Even temporary workers sign one. The security awareness and education campaign is reinforced by our formal program in Corporate Ethics Training. It's mandatory for all employees. We publish security articles in the company newspaper. We show videos about upholding the confidentiality of information and provide talking points to the department managers, who assume responsibility for upholding data security in their area.
Management also tracks security policy violations, and sanctions are enforced.
Organizations must treat the security, privacy and confidentiality of patient health information as a priority business issue. We are even thinking about expanding our security training to include our business partners. Process redesign, documentation and training are a large part of the effort. We have held educational sessions and found that we had to repeat them because it's difficult to absorb everything after one briefing and then assimilate the impact to your area. Appoint someone in your organization to get the project moving.