{"id":3118,"date":"2023-09-27T23:33:49","date_gmt":"2023-09-27T23:33:49","guid":{"rendered":"https:\/\/depts.washington.edu\/uwmedsec\/?page_id=3118"},"modified":"2023-09-27T23:33:50","modified_gmt":"2023-09-27T23:33:50","slug":"frequently-asked-questions","status":"publish","type":"page","link":"https:\/\/depts.washington.edu\/uwmedsec\/frequently-asked-questions\/","title":{"rendered":"Frequently Asked Questions"},"content":{"rendered":"

Please refer to these frequently asked questions for guidance on your security questions. If you are unable to find the answer to your question here, contact UW Medicine Security or submit a ticket to the service desk.<\/p>\n

Protected Health Information (PHI)<\/span><\/h3>\n
\n
\n
<\/span>Can I discuss PHI in Microsoft Teams or Zoom?<\/div>\n
\n

Microsoft Teams is part of the Microsoft O365 application suite licensed for use across the University of Washington and UW Medicine. Per UW-IT, Microsoft Teams is HIPAA-aligned; however, UW Medicine staff should strive to use the HIPAA-Compliant version of Zoom for any video-conferencing needs that involves PHI. <\/em><\/p>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
<\/span>Can I upload files with PHI to OneDrive?<\/div>\n
\n

UW Medicine\u2019s OneDrive for Business is part of the Microsoft O365 application suite licensed for use across the University of Washington and UW Medicine. Per UW-IT, OneDrive for Business is HIPAA-aligned; however, UW Medicine staff should ensure that:<\/p>\n

    \n
  1. Any UW Medicine confidential information, including PHI, is not stored in OneDrive repositories that are overly-permissioned<\/li>\n
  2. Only the minimum necessary amount of PHI is stored in OneDrive repositories<\/li>\n
  3. All PHI should be removed from OneDrive repositories once no longer in use<\/li>\n<\/ol>\n

    <\/em><\/p>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    <\/span>How do I send a secure outbound email containing PHI to an outside vendor?<\/div>\n
    \n

    If you’re sending an email that contains PHI such as patient name or DOB, please review the attached guidance from UW Medicine Compliance regarding the patient’s rights and responsibilities when requesting an alternative communication method such as email.<\/p>\n

    https:\/\/www.uwmedicine.org\/about\/compliance\/email-risk<\/a><\/p>\n

    Additionally, here is a link that provides guidance around already approved email domains and sending TLS encrypted email.<\/p>\n

    https:\/\/depts.washington.edu\/uwmedsec\/restricted\/guidance\/encryption\/approved-email-domains\/<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n

    Encryption<\/span><\/h3>\n
    \n
    \n
    <\/span>How do I safely send or receive files or text containing PHI?<\/div>\n
    \n

    There are two options to transmit files containing PHI, the first is to see our guidance below regarding encrypting emails with Outlook. <\/p>\n

    The second is to send the file or text through the chat feature, while using the HIPAA-Compliant version of Zoom, as anything sent in the chat is encrypted using AES:<\/p>\n

    UW Zoom Portal <\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \n
    \n
    <\/span>How do I encrypt an email with Outlook?<\/div>\n
    \n

    You can easily encrypt email using Outlook on the web.<\/p>\n

      \n
    1. Navigate to Outlook by typing this URL in your browser: https:\/\/outlook.office.com<\/li>\n
    2. When you open a new message, at the top, there is a button that looks like this:
      \n<\/li>\n
    3. Simply click on that button and that message will be encrypted when you send it to the recipient.<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n
      \n
      \n
      <\/span>How do I encrypt files in Microsoft Office?<\/div>\n
      \n

      The answer to this question can be found under Encryption<\/i><\/a> > File Encryption<\/i> under Microsoft Office Encryption<\/strong>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

      \n
      \n
      <\/span>How do I encrypt files in Adobe Acrobat?<\/div>\n
      \n

      The answer to this question can be found on our Encryption<\/i><\/a> > File Encryption<\/i> under Adobe PDF Encryption<\/strong>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

      \n
      \n
      <\/span>How do I encrypt zip files?<\/div>\n
      \n

      The answer to this question can be found on our Encryption<\/i><\/a> > File Encryption<\/i> under Zip Files<\/strong> and Encrypting Zip Files<\/strong>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

      \n
      \n
      <\/span>How do I encrypt my device?<\/div>\n
      \n

      The answer to this question can be found on our Encryption<\/i><\/a> page under Storage Encryption<\/strong>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

      \n
      \n
      <\/span>How do I request a new approved email domain?<\/div>\n
      \n

      See our approved email domains page here<\/a>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

      Phishing and Spam<\/span><\/h3>\n
      \n
      \n
      <\/span>What do I do if I think I received a phishing or spam email?<\/div>\n
      \n

      If you suspect you have received a phishing email message via your UW email account or you receive an email in which someone is trying to get you to download an attachment or enter your UW NetID and password onto a fake web page, send the email as an attachment to help@uw.edu<\/a>.<\/p>\n

      If you receive an email in which someone tries to sell you a product (such as cheap medication), forward the message to reportedspam@cac.washington.edu<\/a>.<\/p>\n

      For more information visit our Phishing and Spam Email Guidance<\/a> page.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

      \n
      \n
      <\/span>What do I do if I think my UW NetID has been compromised?<\/div>\n
      \n

      If you think your UW NetID has been compromised i.e., someone other than yourself has access to your account or emails are being sent from your address that you did not administer, please submit a ticket to the service desk and it will be investigated.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

      Accounts and Passwords<\/span><\/h3>\n
      \n
      \n
      <\/span>I'm having trouble logging in or need to change my password.<\/div>\n
      \n

      For any questions regarding Accounts and Passwords, we have set up a dedicated web page here<\/a>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

      VPN and Remote Connections<\/span><\/h3>\n
      \n
      \n
      \n
      \n
      <\/span>I'm having trouble logging in or need to change my password.<\/div>\n
      \n

      For any questions regarding VPN Usage and Remote Connections, we have set up a dedicated web page here<\/a>. <\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

      Approved eSignature Products<\/span><\/h3>\n
      \n
      \n
      <\/span>What approved products exist for electronically signed documents (eSignatures)?<\/div>\n
      \n

      There are no \u201cApproved\u201d products for producing electronically signed documents (eSignatures). You are free to choose from any eSignature options that are available to you. <\/p>\n

      However, regardless of what platform is chosen to handle eSignatures, an understood and consistent workflow for all users of this \u2018eSignature\u2019 tool should be well documented. We recommend checking with Compliance for legality concerns \u2013 which our team does not address. <\/p>\n

      As an option, the free version of Adobe DC offers the ability to sign PDF documents. For official purposes, we would suggest users obtain a digital signature from a 3rd party Certificate Authority (CA) to use with Adobe DC. <\/p>\n<\/div>\n<\/div>\n<\/div>\n

      Standards and Procedures<\/span><\/h3>\n
      \n
      \n
      <\/span>I need to reference our Information Technology standards - where can I find them?<\/div>\n
      \n

      If transmitting these standards to an entity outside of UW Medicine, never transmit the entire standard, as they are restricted to members within UW Medicine.<\/p>\n

      UW Medicine’s IT standards can be found Here.<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

      Please refer to these frequently asked questions for guidance on your security questions. If you are unable to find the answer to your question here, contact UW Medicine Security or submit a ticket to the service desk. Protected Health Information (PHI) Encryption Phishing and Spam Accounts and Passwords VPN and Remote Connections Approved eSignature Products Standards and Procedures<\/p>\n

      Continue reading Frequently Asked Questions<\/span><\/a><\/div>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3118","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/pages\/3118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/comments?post=3118"}],"version-history":[{"count":43,"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/pages\/3118\/revisions"}],"predecessor-version":[{"id":3632,"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/pages\/3118\/revisions\/3632"}],"wp:attachment":[{"href":"https:\/\/depts.washington.edu\/uwmedsec\/wp-json\/wp\/v2\/media?parent=3118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}