Page History

...

...

• NCSA HIPAA Access Control Standard
• NCSA CUI Access Control Standard
• ACHE HIPAA Facility Security Procedures
• Identity and Access Management Policy
  
• ACHE Vulnerability and Patch Management Standard
• NCSA Incident Response Policy
• NCSA Information Security Policy (this document)
• NCSA Network Security Policy
• NCSA Security Monitoring Policy

...

The Advanced Computational Health Enclave (ACHE) is a special environment with restricted physical and electronic access at NCSA. All Sensitive data including all electronic Protected Health Information (ePHI) and Controlled Unclassified Information (CUI) processed or stored at NCSA is done within this environment.

All NCSA workforce members who need access to this environment or who may come in contact with ePHI during day-to-day operations or an emergency are designated as a part of the NCSA Health Care Component (NHCC) of the University of Illinois Covered Entity. All NCSA workforce members who need access to this environment or who may come in contact with CUI during day-to-day operations or an emergency are designated as a part of the NCSA Staff with ACHE Access group.

All workforce members in the covered entity Covered Entity must take the official UofI HIPAA training annually, and all workforce members in the NCSA Staff with ACHE Access group must take CUI training. If they use laptops to access these systems, the devices must utilize full disk encryption. All laptops and workstations they use for this work must also employ password protected screen savers that automatically lock after a period of inactivity.

...