This policy establishes the coordination of UAB's response to information security and privacy incidents to enable quicker remediation, information gathering, and reporting of infrastructure-affecting HIPAA security- and privacy-related events.

This policy establishes guidelines for departments engaged in administration, education, research, and clinical programs that utilize portable computing devices and/or use portable storage devices or who are considering their implementation in the future.

This policy establishes guidelines for the secure reallocation and disposal of media that contain sensitive data.

This policy sets forth guidelines for establishing minimum criteria for user account management.

This policy sets forth rules for the use of email and internet so that such activity does not negatively impact the confidentiality, availability, integrity, and reputation of UAB and UAB Health System and their assets and supports applicable federal and state laws.

This policy establishes the minimum criteria for granting approved access to information systems.

This policy establishes guidelines for contingency planning for information systems that contain, maintain, or transmit ePHI or other sensitive information.

This policy establishes guidelines for ongoing risk analysis and management of ePHI, which will assist in determining the value of assets and the corresponding exposure to threats and vulnerabilities.

This policy ensures that UAB covered entities implement certain human resources requirements to protect against the wrongful use or disclosure of protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act ("HIPAA") and Alabama state law.

This policy establishes guidelines for the use and disclosure of health information by UAB/UAB Health System Covered entities in compliance with the Health Insurance Portability and Accountability Act and Alabama state law.