This policy sets forth guidelines for establishing minimum criteria for user account management.

This policy establishes the minimum criteria for granting approved access to information systems.

This policy establishes guidelines for departments engaged in administration, education, research, and clinical programs that utilize portable computing devices and/or use portable storage devices or who are considering their implementation in the future.

This policy establishes guidelines for contingency planning for information systems that contain, maintain, or transmit ePHI or other sensitive information.

This policy establishes guidelines for ongoing risk analysis and management of ePHI, which will assist in determining the value of assets and the corresponding exposure to threats and vulnerabilities.

This policy establishes guidelines for the secure reallocation and disposal of media that contain sensitive data.

This policy ensures that UAB covered entities implement certain human resources requirements to protect against the wrongful use or disclosure of protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act ("HIPAA") and Alabama state law.

This policy describes UAB and UAB Medicine's commitment to following approved hiring procedures and outlines the responsibilities Human Resources regarding these procedures.

This policy sets forth rules for the use of email and internet so that such activity does not negatively impact the confidentiality, availability, integrity, and reputation of UAB and UAB Health System and their assets and supports applicable federal and state laws.

This policy establishes guidelines for implementing patient rights related to health information by UAB/UAB Health System Covered Entities, in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”) and Alabama state law.