Tips to Maintain Security After a Termination

Written by Reed Tinsley | September 10, 2008

Security After Termination

Termination procedures are a fundamental part of an information security program, no matter how small the organization. Inadequate policies have resulted in publicized breachs in healthcare.

You should at least have a small checklist that a supervisor or physician follows when an individual leaves. The checklist should address the following points:

  • Revoke the individual's computer access (including all user IDs and passwords)
  • Obtain keys/card-keys
  • Obtain badge
  • Obtain any software or work documents (including those at home) belonging to the organization, if any, and a signed statement declaring that all materials have been returned
  • Obtain any equipment (computer equipment, pagers, PDAs, cell phones, etc.) that belong to the organization
  • Change shared passwords
  • Change combination locks when combination is known to the individual

Be sure to mark a checklist or to record the information in some form. Include the date and the name of the person completing the checklist and file this documentation.

About the Author

Reed Tinsley CPA

This article is written by Reed Tinsley, a Houston, TX-based CPA with over 30 years of experience advising physicians and medical practices across Texas and the United States. Reed holds certifications as a Certified Valuation Analyst (CVA), Certified Healthcare Business Consultant (CHBC), and Certified Financial Planner (CFP), specializing exclusively in the healthcare sector. He is a published author, nationally recognized speaker, and trusted advisor to physicians on accounting & tax, practice management, and financial planning. Schedule a Free Consultation.

Have questions? I’m here to help.