ComputerEquipmentSecurityProceduresdoc.docVIP

Computer Equipment Security PAGE  PAGE 7  MEDICAL PRACTICE COMPUTER EQUIPMENT SECURITY PROCEDURES Contents PageComputer Equipment – Security Procedures3User Responsibilities3Physical Security3Information Security3Passwords4How to Create a Password4Mobile Computing5Administrator Responsibilities6Servers6Service Personnel6Purchase of Equipment7Disposal of Equipment7New users7Leavers7Disciplinary Cases7 Medical Practice Computer Equipment – Security Procedures The Practice has a large investment in computer equipment and also in the information held on Computers, CDs, tapes, floppy disks and other magnetic media. The value is both in the cost of purchasing and running the equipment; and in the users time and effort in putting the information into the computer systems. Procedures are in place to ensure that the information is not lost should anything happen to the systems. However, this inevitably causes delay and disruptions to everyone in the practice, particularly patients, and can also affect our ability to look after our patients. For the purpose of these procedures, the term ‘user’ refers to anyone who has access to information (clinical or non-clinical) within the practice (for example GPs, nurses, practice staff, AHPs, clinical audit, IT personnel etc.) User Responsibilities As a computer user you MUST: Be aware of the IT Security Policies and Procedures within the practice relating to the use of computer equipment and information. Physical Security Be responsible for the security of the computer equipment (PCs, workstations, laptops, printers, monitors and any other equipment that connects to computers) that you use. Switch off computer equipment when it is not going to be in use for some time (includes printers, scanners etc.) NOT open a PC (to expose its electrical components). Computer equipment must only be opened and worked on by authorised users and maintenance engineers.