Password Change Improves Network Security
BWHers are now required to create a new password to log onto the PHS network. The first phase for Password Self Service began at BWH March 14. This change is needed to comply with federal regulations and HIPAA.
BICS keys for clinical systems will remain the same. This means clinical staff will have one, eight-character password for the PHS network and a separate key for BICS and other clinical applications.
“We must implement this change as part of our ongoing efforts to improve network security and augment our protections of electronic health information,” said Sue Schade, BWH’s chief information officer. Password Self Service enables PHS to meet and exceed federal regulations that call for health care organizations to “implement basic safeguards to protect electronic protected health information from unauthorized access, alteration, deletion, and transmission.”
BWH’s roll out plan for Password Self Service is based on staff last names, as staff whose last names begin with A, B or C went first beginning March 14, and subsequent groups followed.
Individuals will choose their own eight-character password which must include at least one letter and one number. These passwords, which are case sensitive, will expire and must be changed every 180 days or six months, and the same password cannot be reused within two years. In addition, the PHS Password Self Service system requires users to select two challenge questions, such as “What is your pet’s name?” or “What is the name of the street on which you grew up?”
Resetting passwords can be completed easily through “My Profile,” which is the Password Self Service Application. A direct link to “My Profile” will appear on the screensaver login. After you receive an e-mail notifying you that you have been enrolled in Password Management and need to create your new eight- character password, you can then use this link to “My Profile” to create your new password, or change it at any time. Please note, you will not be able to use “My Profile” until you have been enrolled and receive email notification. Prior to this, your data will not be in the “My Profile” system.
For more details, including more questions and answers, check out bwhpikenotes.org/passwordselfservice/