To ensure each OSU employee has unique credentials for authenticating to computing systems

Each OSU employee authorized to access EPHI will use a unique identifier that will be used to monitor, verify, and authenticate access to systems containing EPHI.

1. Unique user identification is created in the software for each employee as described in the Access Authorization policy.



2. For authentication to Windows and the network, users will use their active directory log-in.



3. The user then logs into the software with their unique user-id.



4. For procedures in maintaining a secure computer account see Password Guidelines.



5. Procedures for tracking user logons can be found in Log-in Monitoring.

• Access Authorization
• Password Guidelines
• Log-in Monitoring

UHS will conform to OSU IT security policies and procedures when requesting IT access for any new employee.

The OSU Password standard will be used by all UHS staff with access to PHI.

Any UHS staff assigned to a multi-user workstation will be assigned a unique RF key to allow access to that workstation and to allow audit and monitoring by the security officer.

Staff will be instructed and trained on key security issues regarding their identifier and passwords.