Physical Security:

Secured building with monitored alarm system.

Servers, patch panels, routers and switches are located in a locked server room.

On-site data backups are stored in a digital combination steel plated safe.

Off-site data backups are stored in a bank's safety deposit box.

Digital Security:

Server secured by hardware firewall.

Server and all user PC's protected with software that is updated daily to protect against malware such as virus, worms, trojans, spyware, adware, bots, zero-day threats and rootkits, as well as intrusion prevention.

Network connectivity through routers and managed switches (no hubs are used).

WiFi is not used at FNBR.

Password protected computer systems.

Log-in passwords are changed on a regular basis.

HIPAA regulated files are stored in a separate area with limited personnel access.

Files secured using PGP cryptography with 128-bit or better encryption.

Separate email account utilized for all PHI transmissions.  If you are transmitting files with PHI via email, you must encrypt them on your end prior to transmission to FNBR.

Additional Security:

All jobs containing PHI are flagged to be handled accordingly.

All jobs containing PHI include our two page HIPAA Job Checklist.

Job Checklist form enables review through audit trail.

All physical media containing PHI are stored in a secured environment.