Ann, Technically, in order to comply with HIPAA, all you need is a plan to deal with the loss of information services in such a way that confidentiality, integrity and availability of the patient data is maintained up to and including restoration of normal business operations. In all practicality, this makes no sense unless it is integrated with the overall disaster plan for your facility. There will be times when the IT portion of the disaster plan will be the only part activated (network outage, etc.) but it should be integrated with the overall disaster plan. Roy G. Clay, III HIPAA Security Project Coordinator Louisiana State University Health Sciences Center Health Care Services Division Phone: (504) 568-6130 Email: [EMAIL PROTECTED]
-----Original Message----- From: Matlack, Ann [mailto:[EMAIL PROTECTED]] Sent: Friday, July 12, 2002 1:26 PM To: WEDI Security listserv (E-mail) Subject: Contingency Plans We've been asked a question that has given us pause, and wondered if someone on this listserve might be able to help. In developing Contingency Plans, should EMO Plans, etc., be targeted specifically to data recovery, or must they be broader? Should our plans include only how we propose to get the data systems back on line, or must we also include how personnel, communications, building repairs, etc., NOT CONNECTED WITH DATA RECOVERY will be handled? Ann Higgins Matlack Edmund S. Muskie School of Public Service Institute for Public Sector Innovation 295 Water Street Augusta, ME 04330 Tel. (207) 626-5038 e-mail: [EMAIL PROTECTED] Please note that it may take up to 72 hours to process your request. <P>The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. Posting of advertisements or other commercial use of this listserv is specifically prohibited. Please note that it may take up to 72 hours to process your request. <P>The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. Posting of advertisements or other commercial use of this listserv is specifically prohibited.