Department of Pharmacy Policies & Procedures
Number: 4:05
Effective Date: October, 1996
Revisions:
Approval:
Subject: COMPUTER SECURITY
A. POLICY
Access of pharmacy employees to hospital computer systems shall be structured and maintained by the Pharmacy Director and/or his designee.
B. COMPUTER ACCESS SYSTEMS
1. HBO / Pharmacy Dispensing System
- Each employee shall have a unique identifier "X" number for the HBO system.
- Each employee shall further assign a personal password to allow "sign-on" to the
system.
Access privileges for the system are determined by the position held by the employee.
These privileges are defined as:
- Pharmacy Director/Coordinator - Allows full access to the system
- Pharmacist - Patient Care functions only
- Pharmacy Student - Patient Care functions with verification of entry required
- Pharmacy Technician - Information and Charging functions
- Information System Operator - Access to computer functions/ no patient care functions.
2. UNIX Platform -
- A password allowing access to the UNIX system incorporates the HBO password
and is administered by the Pharmacy Director and the Information System Operator.
This is used to assign passwords to the HBO system.
3. LINK
The University Hospital system which connects the various hospital computer systems is called LINK. Each user has a unique identifier and personal password for utilizing the system. This is managed through the LINK coordinator for each department.
4. Auto-Mix/Micro-Mix Multitask Operating System
a. Access to this system is limited to:
Pharmacist - all order entry
Pharmacy Student - order entry with pharmacist verification required
b. Each user has a unique password assigned
5. PYXIS
Access will be strictly maintained to insure adequate security for medication including controlled substances, provide for proper documentation of medication use, and to assure confidentiality of patient data.
- Employees authorized to use the MRX will be able to access any unit in the hospital. A password verification statement will be completed by the employee and signed by the Nurse Manager/Director directly responsible for evaluation of the employee. These codes will be entered into the PYXIS console by Nursing
Informatics.
- New employees and temporary nurses will be assigned a temporary password by the Nurse Manager or ADON . Temporary codes require the user to choose a new password with the initial sign on. The temporary code is only valid for 12 hours from the time of issuance. The employee’s full last name, first name, and license classification (e.g., RN, LPN, etc.) is needed to add a temporary employee. Nursing students must access the MRX via training from the nursing school.
- Physician/practitioner access is not authorized.
- Employees who have forgotten their password must be reentered into the system following the steps outlined in "a". A temporary user access may be assigned as outlined in "b" until another permanent access code can be used.
- When an employee terminates or transfers permanently to a non-patient care area the Manager/Director will immediately notify the Password administrator so that user privileges may be revoked.
- Access Privileges for pharmacy and nursing are determined by their respective
supervisors.
- Station Privileges are set by template. There are 8 templates
Nurse – Administration
Nurse – Management
Nurse – Staff
Nurse – Student
Pharmacy – Tech
Pharmacy – Pharmacist
PSC
Console Manager
The following are different pharmacy console access privileges
(AA) Basic pharmacy privileges.
(BB) Order entry.
(CC) User entry.
- Pharmacy manager .
- System Administrator
- PHARMACY 2000
Each pharmacist and technician in the out-patient pharmacy will have a unique log-on and password for access to the system.
7. HOSPITAL COMPUTER NETWORK
Every pharmacy employee is given access to computer programs on a need-to
know basis according to job description, qualifications and justification by the
departmental director.