This policy sets forth rules for the use of email and internet so that such activity does not negatively impact the confidentiality, availability, integrity, and reputation of UAB and UAB Health System and their assets and supports applicable federal and state laws.

This policy establishes the minimum criteria for granting approved access to information systems.

This policy establishes guidelines for ongoing risk analysis and management of ePHI, which will assist in determining the value of assets and the corresponding exposure to threats and vulnerabilities.

This policy establishes guidelines for contingency planning for information systems that contain, maintain, or transmit ePHI or other sensitive information.

This policy sets forth guidelines for establishing minimum criteria for user account management.

This policy ensures that UAB covered entities implement certain human resources requirements to protect against the wrongful use or disclosure of protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act ("HIPAA") and Alabama state law.

This standard defines password/passphrase requirements for users, servers, and applications at UAB that use BlazerIDs or other authentification identifiers.