The instructor addresses a policy that explains the paper forms to complete if the clinical information system is not available. Which policy is the instructor addressing?

Question

A) Email
B) Downtime
C) Screen security
D) Information uploading

Answer 1

B) Downtime

Explanation: A) Email is a valuable time-saving tool for communication that can also provide opportunities for breaches of patient privacy and security. Email policies should include indications and encryption requirements for outgoing email containing patient information, or alternate procedures for sharing patient information with approved recipients.
B) The downtime policy addresses the procedures to follow during planned and unplanned information-system downtime and may include the specific paper forms to be completed during this time or the alternate electronic database that must be used. The policy may also specify time frames for when certain actions must be completed or when forms should be used or not used. Downtime procedures should be introduced at the time of training and reviewed on a routine basis with end users.
C) Computers used for patient care are often located in areas where patients, families, and others can view protected patient information if the screen is not secured from view. Screen security policies address the timing of screen lock, the use of screen guards, and other aspects.
D) Uploading information into the computer systems of an organization represent a security risk that includes misuse of patient information and violation of patient privacy, as well as the opportunity for malicious
applications to infect the organizational system. Although many organizations have configured individual computers so that universal serial bus (USB) devices and disk drives cannot be accessed, a policy provides an additional level of safeguard.