This policy establishes guidelines for contingency planning for information systems that contain, maintain, or transmit ePHI or other sensitive information.

This policy sets forth guidelines for establishing minimum criteria for user account management.

This policy establishes guidelines for the minimum criteria for granting approved access to information systems.

This policy establishes guidelines to be followed by employees, vendors, and contractors who access the Internet and/or email services using UAB/UABHS resources and information assets.

This policy establishes guidelines for the secure reallocation and disposal of media that contains sensitive data.

This policy establishes guidelines for implementing patient rights related to health information by UAB/UAB Health System Covered Entities, in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”) and Alabama state law.

This policy establishes guidelines for ongoing risk analysis and management of ePHI, which will assist in determining the value of assets and the corresponding exposure to threats and vulnerabilities.

This policy establishes guidelines for reporting and investigating known and suspected information security incidents.

This policy establishes guidelines for the use and disclosure of health information for purposes of fundraising by UAB/UABHS Covered Entities in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”) and Alabama state law.

This policy establishes guidelines for the use and disclosure of health information for purposes of marketing by UAB/UABHS Covered Entities in compliance with the Health Insurance Portability and Accountability Act and Alabama state law.