Information Security Awareness and Training - Revision history

Afaylor: /* Additional Information */ updated HIPAA Security Rule link - 3x

2025-09-29T19:18:50Z

Additional Information: updated HIPAA Security Rule link - 3x

← Older revision		Revision as of 14:18, September 29, 2025
Line 35:		Line 35:
	<big>'''Information Security Awareness and Training Policy'''</big><br /><br />		<big>'''Information Security Awareness and Training Policy'''</big><br /><br />
	== Basis for Policy ==		== Basis for Policy ==
	Nebraska Medicine/UNMC implements reasonable and appropriate access controls in alignment with National Institute of Standards and Technology (NIST) standards and guidance to maintain the minimum necessary access. [https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/~~publications~~/~~topic~~/hipaa.html~~#security-rule~~ HIPAA Security Rule] outline considerations for the access control family of security controls.		Nebraska Medicine/UNMC implements reasonable and appropriate access controls in alignment with National Institute of Standards and Technology (NIST) standards and guidance to maintain the minimum necessary access. [https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html HIPAA Security Rule] outline considerations for the access control family of security controls.
	== Policy ==		== Policy ==
	Nebraska Medicine/UNMC implements reasonable and appropriate security awareness and training in alignment with National Institute of Standards and Technology (NIST) standards and guidance.[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/~~publications~~/~~topic~~/hipaa.html~~#security-rule~~ HIPAA Security Rule], the Family Educational Rights and Privacy Act (FERPA), and Payment Card Industry Data Security Standards (PCI/DSS) outline considerations for the security awareness and training family of security controls. Nebraska Medicine/UNMC will strive to reach a level of security awareness both to prevent improper access to or use or disclosure of Protected Information and to ensure detection and reporting of any improper access, use or disclosure that may occur.		Nebraska Medicine/UNMC implements reasonable and appropriate security awareness and training in alignment with National Institute of Standards and Technology (NIST) standards and guidance.[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html HIPAA Security Rule], the Family Educational Rights and Privacy Act (FERPA), and Payment Card Industry Data Security Standards (PCI/DSS) outline considerations for the security awareness and training family of security controls. Nebraska Medicine/UNMC will strive to reach a level of security awareness both to prevent improper access to or use or disclosure of Protected Information and to ensure detection and reporting of any improper access, use or disclosure that may occur.
	==Procedure==		==Procedure==
	===General===		===General===
Line 96:		Line 96:
	*[http://www.sos.ne.gov/records-management/schedule_170.html UNMC Record Retention Schedule]		*[http://www.sos.ne.gov/records-management/schedule_170.html UNMC Record Retention Schedule]
	*[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53]		*[https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53]
	*[https://www.cdc.gov/phlp/~~publications~~/~~topic~~/hipaa.html~~#security-rule~~ HIPAA Security Rule]		*[https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html HIPAA Security Rule]


	This page maintained by [mailto:mhurlocker@unmc.edu mh].		This page maintained by [mailto:mhurlocker@unmc.edu mh].

Mhurlocker at 15:25, July 9, 2024

2024-07-09T15:25:38Z

← Older revision		Revision as of 10:25, July 9, 2024
Line 30:		Line 30:
	Policy No.: '''6301'''<br />		Policy No.: '''6301'''<br />
	Effective Date: '''07/14/16'''<br />		Effective Date: '''07/14/16'''<br />
	Revised Date: '''~~draft 09~~/22/22''' <br />		Revised Date: '''06/06/24'''<br />
	Revised Date: <br />		Revised Date: '''06/06/24'''<br />
	<br />		<br />
	<big>'''Information Security Awareness and Training Policy'''</big><br /><br />		<big>'''Information Security Awareness and Training Policy'''</big><br /><br />

Mhurlocker: /* Additional Information */

2024-07-09T15:24:58Z

Additional Information

← Older revision		Revision as of 10:24, July 9, 2024
Line 99:		Line 99:


	This page maintained by [mailto:~~dpanowic~~@unmc.edu ~~dkp~~].		This page maintained by [mailto:mhurlocker@unmc.edu mh].

Dpanowic at 21:50, September 22, 2022

2022-09-22T21:50:12Z

← Older revision		Revision as of 16:50, September 22, 2022
Line 30:		Line 30:
	Policy No.: '''6301'''<br />		Policy No.: '''6301'''<br />
	Effective Date: '''07/14/16'''<br />		Effective Date: '''07/14/16'''<br />
	Revised Date: <br />		Revised Date: '''draft 09/22/22''' <br />
	Revised Date: <br />		Revised Date: <br />
	<br />		<br />

Dpanowic at 21:48, September 22, 2022

2022-09-22T21:48:45Z

Show changes

Dpanowic at 19:52, October 5, 2020

2020-10-05T19:52:33Z

← Older revision		Revision as of 14:52, October 5, 2020
Line 26:		Line 26:
	</table>		</table>
	<br />		<br />
	[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Retention and Destruction/Disposal of Private and Confidential Information]] \| [[Use and Disclosure of Protected Health Information]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]] \| [[Honest Broker]] \| [[Social Security Number]] \| [[Third Party Registry]] \| [[Information Security Awareness and Training]] \| [Patient Privacy Investigations and Levels of Violation]		[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Retention and Destruction/Disposal of Private and Confidential Information]] \| [[Use and Disclosure of Protected Health Information]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]] \| [[Honest Broker]] \| [[Social Security Number]] \| [[Third Party Registry]] \| [[Information Security Awareness and Training]] \| [[Patient Privacy Investigations and Levels of Violation]]
	<br /><br />		<br /><br />
	Policy No.: '''6301'''<br />		Policy No.: '''6301'''<br />

Dpanowic at 19:52, October 5, 2020

2020-10-05T19:52:03Z

← Older revision		Revision as of 14:52, October 5, 2020
Line 26:		Line 26:
	</table>		</table>
	<br />		<br />
	[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Retention and Destruction/Disposal of Private and Confidential Information]] \| [[Use and Disclosure of Protected Health Information]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]] \| [[Honest Broker]] \| [[Social Security Number]] \| [[Third Party Registry]] \| [[Information Security Awareness and Training]]		[[Identification Card]] \| [[Secure Area Card Access]] \| [[Privacy/Confidentiality]] \| [[Computer Use/Electronic Information]] \| [[Retention and Destruction/Disposal of Private and Confidential Information]] \| [[Use and Disclosure of Protected Health Information]] \| [[Notice of Privacy Practices]] \| [[Access to Designated Record Set]] \| [[Accounting of PHI Disclosures]] \| [[Patient/Consumer Complaints]] \| [[Vendors]] \| [[Fax Transmissions]] \| [[Psychotherapy Notes]] \| [[Facility Security]] \| [[Conditions of Treatment Form]] \| [[Informed Consent for UNMC Media]] \| [[Transporting Protected Health Information]] \| [[Honest Broker]] \| [[Social Security Number]] \| [[Third Party Registry]] \| [[Information Security Awareness and Training]] \| [Patient Privacy Investigations and Levels of Violation]
	<br /><br />		<br /><br />
	Policy No.: '''6301'''<br />		Policy No.: '''6301'''<br />

Afaylor: add Faculty tab

2019-08-02T18:07:57Z

add Faculty tab

← Older revision		Revision as of 13:07, August 2, 2019
Line 20:		Line 20:
	<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF"		<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF"
	width="20">[[Intellectual Property]]</td>		width="20">[[Intellectual Property]]</td>
			<td style="border-bottom:2px solid #A3B1BF" width="3"> </td>
			<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF"
			width="20">[[Faculty]]</td>
	</tr>		</tr>
	</table>		</table>

Afaylor: /* Additional Information */

2018-12-12T17:13:17Z

Additional Information

← Older revision		Revision as of 12:13, December 12, 2018
Line 63:		Line 63:
	==Additional Information==		==Additional Information==
	*Contact [https://support.security.unmc.edu Office of Information Security] or 402.559.2545.		*Contact [https://support.security.unmc.edu Office of Information Security] or 402.559.2545.
	*UNMC Policy No. 6045, [~~http~~://wiki.unmc.edu/index.php~~?title=~~Privacy/Confidentiality Privacy, Confidentiality ~~and Information Security~~]		*UNMC Policy No. 6045, [https://wiki.unmc.edu/index.php/Privacy/Confidentiality Privacy/Confidentiality]
	*UNMC Policy 1098, [https://wiki.unmc.edu/index.php/Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy]		*UNMC Policy 1098, [https://wiki.unmc.edu/index.php/Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy]
	*UNMC Policy No. 6051, [~~http~~://wiki.unmc.edu/index.php~~?title=~~Computer_Use/Electronic_Information Computer Use ~~and~~ Electronic Information ~~Security~~]		*UNMC Policy No. 6051, [https://wiki.unmc.edu/index.php/Computer_Use/Electronic_Information Computer Use/Electronic Information]
	*UNMC Policy 6056, [https://wiki.unmc.edu/index.php/Retention_and_Destruction/Disposal_of_Private_and_Confidential_Information Retention and Destruction/Disposal of Private and Confidential Information]		*UNMC Policy 6056, [https://wiki.unmc.edu/index.php/Retention_and_Destruction/Disposal_of_Private_and_Confidential_Information Retention and Destruction/Disposal of Private and Confidential Information]
	*[http://www.sos.ne.gov/records-management/schedule_170.html UNMC Record Retention Schedule]		*[http://www.sos.ne.gov/records-management/schedule_170.html UNMC Record Retention Schedule]

	This page maintained by [mailto:dpanowic@unmc.edu dkp].		This page maintained by [mailto:dpanowic@unmc.edu dkp].

Afaylor: /* Additional Information */

2018-12-12T15:36:57Z

Additional Information

← Older revision		Revision as of 10:36, December 12, 2018
Line 62:		Line 62:
	'''Workforce''' refers to faculty, full and part-time employees (management and staff), volunteers, trainees, students, and any other persons whose conduct, in the performance of work for UNMC, is under the direct control of UNMC, whether or not they are paid by UNMC.		'''Workforce''' refers to faculty, full and part-time employees (management and staff), volunteers, trainees, students, and any other persons whose conduct, in the performance of work for UNMC, is under the direct control of UNMC, whether or not they are paid by UNMC.
	==Additional Information==		==Additional Information==
	*Contact [~~mailto~~:~~infosecurity@unmc~~.~~edu infosecurity@~~unmc.edu] or 402.559.2545.		*Contact [https://support.security.unmc.edu Office of Information Security] or 402.559.2545.
	*UNMC Policy No. 6045, [http://wiki.unmc.edu/index.php?title=Privacy/Confidentiality Privacy, Confidentiality and Information Security]		*UNMC Policy No. 6045, [http://wiki.unmc.edu/index.php?title=Privacy/Confidentiality Privacy, Confidentiality and Information Security]
	*UNMC Policy 1098, [https://wiki.unmc.edu/index.php/Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy]		*UNMC Policy 1098, [https://wiki.unmc.edu/index.php/Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy]