O FFICE OF THE GOVERNOR MISSISSIPPI DIVISION OF MEDICAID MEMORANDUM

Transcription

1 O FFICE OF THE GOVERNOR MISSISSIPPI DIVISION OF MEDICAID MEMORANDUM To: All DOM Independent Contractors From: Nicole Litton, Deputy Administrator for Policy & Compliance and HIPAA Privacy Officer Date: April 22, 2014 Re: DOM s Encryption Policy It is DOM s policy that s containing Protected Health Information ( PHI ) or Personally Identifiable Information ( PII ) sent outside of the agency network be encrypted by the sender. If you are a DOM Independent Contractor with an address that does not end you will need to enroll in DOM s Cisco Secured service in order to view any encrypted s sent to you by a DOM workforce member. For your convenience, instructions on setting up your account have been attached to this memo. Using the Cisco Secured service will allow you to receive and respond to encrypted s sent by DOM personnel. You will not be able to initiate a secure to DOM through this service. By executing the DOM Business Associate Agreement you agree, to use appropriate safeguards and comply, where applicable, with the Security Rule to prevent Use or Disclosure of PHI. (See Section III (b)). In order to adhere to this obligation you should take the necessary steps to protect DOM PHI or PII contained in all electronic transfers with encryption software or a program that uses FIPS certified algorithm which is 128 bit or higher, such as AES. Encryption can be end to end at the network level, or the data file containing PHI can be encrypted. If you are not currently transferring DOM PHI or PII in this manner, please address this issue immediately. If you do not have the encryption capabilities as described above or have questions regarding encryption as it pertains to DOM PHI or PII, please contact the DOM Security Officer at Attachment

2 Cisco Secure Registration Process Your recipient will need to enroll in DOM s Cisco Secured service. The recipient will receive an notification with instructions for enrolling. Enrollment is only required the first time an address receives a secure message. Once the online enrollment process is complete, your recipient will receive an with an attachment titled "securedoc.html" (this is your secure message). When opening the attachment, the recipient will be prompted to enter the password selected during the enrollment process. Once the password is verified, your recipient will be able to view your message.

3 d d CISCO J'il"'oUVy 15, 20t.d 3.:01"' PM Oltr Ues»Qt S.writy. High f'rom: To: Subject: stephen.k ennedy(bmedicaid.ms.gov bo l@gmail.com Tes:t To open this messaqe, first d ick tile button to register. After registering, come baek to continue opening the message. IREGISTERI Select d djfferent address Cisco Registered Envelope Service ['.11:::1/\1 U~l:::k. Rl:::t_;l~ I RA I lu'.i COP'VtiQht ~ :woo~2013 Cisco Systttms. Inc All rlqhts rtserved To r~ssure futt- re m~ssages frcm th:s ser /Ice ore not acckiento/1}' flkered out o' }'OUr , please add "O<.Nc..oU:~.vJ. IPI{llt':!:..<.')<.V...<.<. tn" ~' 1" '<-'t AVc..ltt:>:.:.!'\<.oc..ok <. t So/<:> S<:> J</f:'l :.i:.l.. - required field Eulo:tr P~rt.vu<tl Iulvrouctlivu em.:~il Pddrc~s br Lo:~nou.:atc I Euyliut1 First N.:amc' 1 ' JstcFJtiLrl La t Name fj.o.:...r1r11:1dy utoom.:~il.com I rho /cngu;;j:;c setting Nil/ be stor~d for fut:urc log'n <lilt.) eru~i/ 11vU/i(AIUVU~,!!nl.<:-1 ~ OJh iihuijj <. I 6 <.'hdl<l<.'l.<:-1:. <. 1 IJ<JOJI.of::' :.. t:'i!issi~''-"'i'ds /!II'<:!'.:'s-e- s~nsiti.re. '>"...,vr pessw... "'''d must.y'>nf.-,.,n hnfl-> /r:tt: :r<.-,.nrl nlll'l')hr:r~. Cnt:cr a shcn: phrase that: Oo"'ly ycu wilt know. rhts Person~l '3ec'-''ltv Phn~s:e"' f\lroorrl VroOYl.-.;~~~diu: 1 ;;:~/ ;;~~~~~ <.';'~' ~~=~.~:,~;" J.";,:~::~ ;~:.:t.:~:. 1,~,,/o-,rl,...~ lo-,ojojlnoj n fl., f)(lr "''"''~'"~ CIM.,.,..,,~ nth bt!j 1-n:'lhlt'\ n-y l't'lr'l.t'ln."''l ~;t'\0"\ll"ity l'hl"."'l'l.r. Sel~ci: '::> Secu.-ity Que tion Yn1 Will,..,r:.-,.<:! r:rl rhr:<:r: t?llt":<f'l,.,n<: 1n thr: foturr. 1' yn t '"'~"!Jt"::f' yr.ur p.-,.<:<:wnrrl. I VJnat 19 yol r tatnet'9 middle name, Que1:tion l''' An~WI'\1',,., Jlnho < :t'lnfi1 m An~w.-:1 l,., Jlnho VJh<:.~l i~:> yu1..r ru<o~h:hrl<:.~l yr<:.~udruult '=lr'~:> f r~:>l U<IHI'=I? '"''~""""' :2"' fvvayne Cu11firu1 "''~""""' :2"' rjv::-v:-a-y_n_e Que1:tion.: 1 VJhat 19 tne tlr9t name ot ycur tint bo'li9'o' An~WI'\1' ;,., fthp. n1 kp. < :t'lnfi1 m An~w.-:1 : "" cft::h-e-. "n""o"'k-e

4

5

6 SeOJI!dfoless $-trr. ~~,v.... ir;_ bf 1~!Ia ~ ts,. ntct-41~ fitgmf t.e)f4; Ttst PEPL Y TO SENDER From: br l {tgma.l.com TOI ~tephen.l<enned,.med u d.m~.qoy SubJect: E: Tes1 Attachments (none) Me shoe TROll: :olephen.j9onnedjl8med ica>.d. ms. IJOV TO: b r 19~il ;500ltl Automat catl y BCC me on this ema-11. send m! rt-td reee1pt when~ reetl)i!nt hai opened ttus ema ol, 11\ls opaon does not 9ua,. ntee a re~ P-t wdl be sent; reop1ent ema1l.appf,cabons can sometimes blod. re-ad receapt requests.