Q&A: You’ve got questions! We’ve got answers!
Physician Practice Insider, March 7, 2017
Submit your questions to Associate Editor Nicole Votta at nvotta@hcpro.com and we will work with our experts to provide you with the information you need.
Q: Are we required to have employees change their passwords on a regular schedule? If so, how often should we reset passwords?
A: Yes, it is sound security practice to require employees to periodically change their passwords. It is recommended that passwords be updated at least every 90 days. This can be a challenge and there will likely be pushback from some staff. There is no set regulatory requirement to periodically change passwords but there is a requirement to implement sound password management. That would include requiring strong passwords, the requirement to change passwords at least every 90 days or when it’s believed that the password has been compromised, and not permitting employees to use the same password for at least five iterations or times the password is changed.
Editor’s note: This question was answered by Chris Apgar, CISSP, for Briefings on HIPAA. Apgar is the president and CEO of Apgar & Associates in Portland, Oregon. He is also an advisory board member for BOH. This information does not constitute legal advice. Consult legal counsel for answers to specific privacy and security questions. Opinions expressed are those of the author and do not represent HCPro or ACDIS. Email your questions to Associate Editor Nicole Votta at nvotta@hcpro.com.
Related Products
-
Physician Practice Perspective
Physician Practice Perspective subscribers can find the archive of issues on the Part B News website. Find more information...
-
Medical Environment Update
A subscription to Medical Environment Update pays for itself by saving you time sorting through complex regulations and...
-
HealthLeaders Media Physician Leaders
HealthLeaders Media Physician Leaders offers commentaries that focus on the hottest issues for doctors as well as concise...
-
Medical Environment Update - Electronic and Print, 1 year
A subscription to Medical Environment Update pays for itself by saving you time sorting through complex regulations and...
-
Medical Environment Update - Electronic, 1 year
A subscription to Medical Environment Update pays for itself by saving you time sorting through complex regulations and...
Most Popular
- Articles
-
- Don't forget the three checks in medication administration
- Note similarities and differences between HCPCS, CPT® codes
- Q&A: Primary, principal, and secondary diagnoses
- Practice the six rights of medication administration
- What does case-mix index mean to you?
- Complications from immobility by body system
- Nursing responsibilities for managing pain
- OB services: Coding inside and outside of the package
- Prevent dehydration with nursing interventions
- Coding Clinic reiterates guidelines for provider documentation
- E-mailed
-
- Capturing start and stop times for infusions
- Q/A: Billing telemetry daily monitoring
- Q&A: Sepsis as a primary diagnosis
- Learn how to read an OP report
- Inpatient-only procedures: Accuracy helps avoid denials, ensure compliance
- Don't forget the three checks in medication administration
- Coding, billing, and documentation tips for teaching physicians, interns, residents, and students
- Coding Clinic reiterates guidelines for provider documentation
- Clinical Corner: Revisiting respiratory failure
- Clear up confusion surrounding observation services
- Searched
