Q&A: You’ve got questions! We’ve got answers!
Physician Practice Insider, March 7, 2017
Submit your questions to Associate Editor Nicole Votta at nvotta@hcpro.com and we will work with our experts to provide you with the information you need.
Q: Are we required to have employees change their passwords on a regular schedule? If so, how often should we reset passwords?
A: Yes, it is sound security practice to require employees to periodically change their passwords. It is recommended that passwords be updated at least every 90 days. This can be a challenge and there will likely be pushback from some staff. There is no set regulatory requirement to periodically change passwords but there is a requirement to implement sound password management. That would include requiring strong passwords, the requirement to change passwords at least every 90 days or when it’s believed that the password has been compromised, and not permitting employees to use the same password for at least five iterations or times the password is changed.
Editor’s note: This question was answered by Chris Apgar, CISSP, for Briefings on HIPAA. Apgar is the president and CEO of Apgar & Associates in Portland, Oregon. He is also an advisory board member for BOH. This information does not constitute legal advice. Consult legal counsel for answers to specific privacy and security questions. Opinions expressed are those of the author and do not represent HCPro or ACDIS. Email your questions to Associate Editor Nicole Votta at nvotta@hcpro.com.
Related Products
-
Physician Practice Perspective
Physician Practice Perspective subscribers can find the archive of issues on the Part B News website. Find more information...
-
Medical Environment Update
A subscription to Medical Environment Update pays for itself by saving you time sorting through complex regulations and...
-
HealthLeaders Media Physician Leaders
HealthLeaders Media Physician Leaders offers commentaries that focus on the hottest issues for doctors as well as concise...
-
Medical Environment Update - Electronic and Print, 1 year
A subscription to Medical Environment Update pays for itself by saving you time sorting through complex regulations and...
-
Medical Environment Update - Electronic, 1 year
A subscription to Medical Environment Update pays for itself by saving you time sorting through complex regulations and...
Most Popular
- Articles
-
- Practice the six rights of medication administration
- Note similarities and differences between HCPCS, CPT® codes
- Don't forget the three checks in medication administration
- Code diagnoses and outpatient treatment for PTSD
- Differentiate between types of wound debridement
- OB services: Coding inside and outside of the package
- Q&A: Primary, principal, and secondary diagnoses
- What to include on the incident report
- Know guidelines and subtle differences in code descriptions for laceration repairs
- Understanding and coding for critical care services
- E-mailed
-
- Neurological checks for head injuries
- ICD-10-CM coma, stroke codes require more specific documentation
- HIPAA Q&A: Maintenance of medical records after physician death
- Ensure compliance with EPA rule: Ban all sewering of hazardous waste drugs
- Dig into the details of wound care documentation
- Differentiate between types of wound debridement
- Critical Test and Critical Result Reporting
- Coding tip: Learn the difference between nasopharyngoscopy and endoscopy procedures
- CMS replaces clinic E/M visit levels with single G-code
- Clear up confusion surrounding observation services
- Searched
