Physical Facility Maintenance

Overview

Repairs or modifications to any physical component that is related to the protection of Electronic Protected Health Information (EPHI) must be documented. Physical components include, but are not limited to, automated physical access systems, locks, doors and walls.

Purpose

To ensure that changes to physical facilities are documented and are consisted with what is needed to secure physical access to Electronic Protected Health Information (EPHI)

Scope

Physical components include, but are not limited to, automated physical access systems, locks, doors and walls throughout the UVA Medical Center.

Description

Repairs or modifications to any physical component that is related to the protection of Electronic Protected Health Information (EPHI) must be documented. Physical components include, but are not limited to, automated physical access systems, locks, doors and walls. At a minimum, the documentation must include:

  • Date and time of repair or modification
  • Reason for repair or modification
  • Persons performing the repair or modification
  • Outcome of the repair

Documentation must be securely maintained by the department as outlined in the the Facility Security Plan.

Document Supporting Resources

Facility Security Plan