Access to Web pages that contain confidential patient information should be password protected. No common or shared usernames should be used. Breakin detection auditing should be enabled. Users should sign the UCHS confidentiality statement. Access to Web pages that contain clinical information should be filtered at the UCHC Internet gateway unless the market benefits of such access outweigh the increased security risks.
Service providers are to keep records of authorizations granted.
The use of network resources by individuals not associated with the mission of UCHC is forbidden. Newly installed station cabling is level 5 twisted pair. Departmental networks must be bridged to UCHC-Net. As of this writing ITD will disable all unused network connections. However, ITD is working on a plan that will allow open ports to remain active while ensuring the stability and security of the network.