Ann,
Technically, in order to comply with HIPAA, all you need is a plan to deal
with the loss of information services in such a way that confidentiality,
integrity and availability of the patient data is maintained up to and
including restoration of normal business operations. In all practicality,
this makes no sense unless it is integrated with the overall disaster plan
for your facility. There will be times when the IT portion of the disaster
plan will be the only part activated (network outage, etc.) but it should be
integrated with the overall disaster plan. 
Roy G. Clay, III
HIPAA Security Project Coordinator
Louisiana State University Health Sciences Center
Health Care Services Division
Phone: (504) 568-6130
Email: [EMAIL PROTECTED]


-----Original Message-----
From: Matlack, Ann [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 12, 2002 1:26 PM
To: WEDI Security listserv (E-mail)
Subject: Contingency Plans


We've been asked a question that has given us pause, and wondered if someone
on this listserve might be able to help.

In developing Contingency Plans, should EMO Plans, etc., be targeted
specifically to data recovery, or must they be broader?  Should our plans
include only how we propose to get the data systems back on line, or must we
also include how personnel, communications, building repairs, etc., NOT
CONNECTED WITH DATA RECOVERY will be handled?  

Ann Higgins Matlack
Edmund S. Muskie School of Public Service
Institute for Public Sector Innovation
295 Water Street
Augusta, ME  04330
Tel.  (207) 626-5038
e-mail:  [EMAIL PROTECTED]
 



Please note that it may take up to 72 hours to process your request.

<P>The WEDI SNIP listserv to which you are subscribed is not moderated.  The
discussions on this listserv therefore represent the views of the individual
participants, and do not necessarily represent the views of the WEDI Board
of
Directors nor WEDI SNIP.  If you wish to receive an official opinion, post
your question to the WEDI SNIP Issues Database at
http://snip.wedi.org/tracking/.
Posting of advertisements or other commercial use of this listserv is
specifically prohibited.

Please note that it may take up to 72 hours to process your request.

<P>The WEDI SNIP listserv to which you are subscribed is not moderated.  The
discussions on this listserv therefore represent the views of the individual
participants, and do not necessarily represent the views of the WEDI Board of
Directors nor WEDI SNIP.  If you wish to receive an official opinion, post
your question to the WEDI SNIP Issues Database at
http://snip.wedi.org/tracking/.
Posting of advertisements or other commercial use of this listserv is
specifically prohibited.

Reply via email to