Source: https://catalyzeio.github.io/policies/source/sections/19-employees_policy.html
Timestamp: 2019-10-14 08:04:21
Document Index: 422723259

Matched Legal Cases: ['§8', '§7', '§7', '§7', '§11', '§12', '§11']

Employees Policy | policies
Datica is committed to ensuring all workforce members actively address security and compliance in their roles at Datica. As such, training is imperative to assuring an understanding of current best practices, the different types and sensitivities of data, and the sanctions associated with non-compliance.
Upon completion of training, workforce members complete this form.
Current Datica training is hosted at training.datica.com.
The Datica Employee Handbook clearly states the responsibilities and acceptable behavior regarding information system usage, including rules for email, Internet, mobile devices, and social media usage.
Workforce members are required to sign an agreement stating that they have read and will abide by all terms outlined in the Datica Employee Handbook, along with all policies and processes described in this document.
Datica does not allow mobile devices to connect to any of its production networks.
All new workforce members are given HIPAA training within 30 days of beginning employment. Training includes HIPAA reporting requirements, including the ability to anonymously report security incidents, and the levels of compliance and obligations for Datica and its Customers and Partners.
All Datica-purchased and -owned computers are to display this message at login and when the computer is unlocked: This computer is owned by Datica Health, Inc. By logging in, unlocking, and/or using this computer you acknowledge you have seen, and follow, these policies (https://policy.datica.com) and have completed this training (https://training.datica.com). Please contact us if you have problems with this - privacy@datica.com.
Employees may only use Datica-purchased and -owned workstations for accessing production systems with access to ePHI data.
Datica may monitor access and activities of all users on workstations and production systems in order to meet auditing policy requirements (§8).
Access to internal Datica systems can be requested using the procedures outlined in §7.2. All requests for access must be granted by the Datica Security Officer.
Request for modifications of access for any Datica employee can be made using the procedures outlined in §7.2.
Datica employees are strictly forbidden from downloading any ePHI to their workstations.
Restricting transfers of ePHI is enforced through technical controls as described in §7.13.
Datica workforce members are to escalate issues using the procedures outlined in the Employee Handbook. Issues that are brought to the Escalation Team are assigned an owner. The membership of the Escalation Team is maintained by the Chief Executive Officer.
Security incidents, particularly those involving ePHI, are handled using the process described in §11.2. If the incident involves a breach of ePHI, the Security Officer will manage the incident using the process described in §12.2. Refer to §11.2 for a list of sample items that can trigger Datica’s incident response procedures; if you are unsure whether the issue is a security incident, contact the Security Officer immediately.
Create an Issue in the Datica Quality Management System.