6. Emergency Access Procedure

Owner of this task

ViCarePlus HealthCare IT Services & Support

6559, SpringPath Lane, San Jose, CA, USA

Website: http://www.vicareplus.com

Email: services@vicareplus.com

Meaningful Use Requirements

Permit authorized users (who are authorized for emergency situations) to access electronic health information during an emergency.

Breakglass

The individual facility can describe the guidelines for an emergency situation. An emergency access solution should be used only when normal processes are insufficient (e.g. the helpdesk or system administrator is unavailable).

Technical Requirements

1. Creation of a new access control policy "BreakGlass" [Options already available]

2. When the break glass policy is chosen while user creation, the account should be disabled by default. The usernames should be of the format "breakglassxxx" or "emergencyxxx"

3. When the break glass account is activated (during emergency situation), an automatic mail should be sent to the configured mail ids.

4. Irrespective of the log level, all activities during emergency access should be logged

5. After the emergency period, the account should be deleted and the audit trail should take place [Administrative requirements]

Status

Completed.

Links

• Sourceforge Communication - http://sourceforge.net/projects/openemr/forums/forum/202506/topic/3532189 (second)
• Sourceforge Communication - http://sourceforge.net/projects/openemr/forums/forum/202506/topic/3397800 (first)

• Break Glass/Emergency User Test Report - http://www.openmedsoftware.org/mw/images/4/4f/BreakglassTestReport.tar