To ensure that each employee is kept informed of best practices and security procedures with PHI

Each employee is to know how to safely and securely handle EPHI. All OSU employees are expected to read and follow the guidelines provided.

OSU will provide a webpage for employees. IT will be responsible for sending out emails whenever new information or security threats are made available. The Compliance Officer or other designated area will send an email to employees at least each quarter with tips and/or reminders referencing the webpage.

• Password management and selection
• Security incident reporting
• Virus protection and its importance
• New Virus Alerts
• SUS Updates (Microsoft patches)

The UHS and CHS designated HIPAA official will periodically provide security awareness reminders to all staff. These reminders may include, but not be limited to, verbal discussions at department or building meetings; print materials; video; cd-rom; internet streaming; or formal training seminars. A log of all security reminders and the recipients of the reminders will be maintained.