| To implement controls governing the receipt, removal, and movement of hardware and electronic media into, out of, and within a Los Angeles County Department of Mental Health (DMH) facility.
Contracted agencies shall develop an internal policy and associated procedures that are consistent with their organizational practices and meet the requirements set forth in this policy.
|
| DMH Chief Information Officer (CIO) shall implement security safeguards governing the receipt, removal, and movement of hardware and electronic media containing Protected Health Information (PHI) into, out of, and within a DMH facility. -
Disposal: System managers/owners must comply with the Device and Media Controls Procedure of this policy to address the final disposition of all information and the hardware or electronic media on which it is stored.
-
Media Reuse: System managers/owners must remove Protected Health Information (PHI) and other confidential and/or sensitive information before the media is made available for reuse.
-
Accountability: System managers/owners or designees must be accountable for documenting the movement of hardware and electronic media and any person responsible therefor in a hardware and software inventory system.
-
Data Backup and Storage: System managers/owners or designees must create a retrievable, exact copy of electronic information when needed before the movement of equipment. |
