Identify contingency operations for security of PHI and facilities

In the event of disaster or emergency, OSU security personnel and/or it’s contractors will monitor and restrict access to the building or areas housing PHI, both written and electronic.

At the occurrence of a disaster or emergency, the security vendor will contact the Director of Campus Police, the Medical Director, and the Director of Clinic Financial Operations. The vendor will then secure all areas as necessary. Operations will then be based upon the facility contingency plan.

• Contingency Plan policy SEC 07.03 Emergency Mode Operations.

1. Every member of UHS’s workforce is responsible for the integrity of UHS’s electronic protected health information.



2. In the event of an occurrence that would require contingency operations, the security officer or the administrator will determine if there are any vulnerabilities to the electronic protected health information of UHS.



3. The Security Official or administrator will implement steps for UHS to initiate contingency operations. This may include use of existing OSU or UHS disaster plans.



4. UHS will take all steps to reduce the risk of vulnerability.



5. The Contingency Plan of UHS is an ongoing responsibility and will be reviewed by the Security Official of UHS.



6. All staff will be trained on the procedures of the UHS Disaster Plan and steps necessary to safeguard PHI in all its forms.