Access Controls The system providing access to PHI COUNTY discloses to 20 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 21 must use role based access controls for all user authentications, enforcing the principle of least privilege.
Personal Controls a. Employee Training. All workforce members who assist in the performance of functions or activities on behalf of COUNTY in connection with Agreement, or access or disclose PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY, must complete information privacy and security training, at least annually, at CONTRACTOR’s expense. Each workforce member who receives information privacy and security training must sign a certification, indicating the member’s name and the date on which the training was completed. These certifications must be retained for a period of six (6) years following the termination of Agreement.
Audit Controls P. Contractor agrees to an annual system security review by the County to assure that systems processing and/or storing Medi-Cal PII are secure. This includes audits and keeping records for a period of at least three (3) years. A routine procedure for system review to catch unauthorized access to Medi-Cal PII shall be established by the Contractor.
Export Controls Both Parties will adhere to all applicable laws, regulations and rules relating to the export of technical data and will not export or re-export any technical data, any products received from the other Party or the direct product of such technical data to any proscribed country listed in such applicable laws, regulations and rules unless properly authorized.
User IDs and Password Controls All users must be issued a unique user name for accessing DHCS PHI or PI. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee with knowledge of the password, at maximum within 24 hours. Passwords are not to be shared. Passwords must be at least eight characters and must be a non-dictionary word. Passwords must not be stored in readable format on the computer. Passwords must be changed every 90 days, preferably every 60 days. Passwords must be changed if revealed or compromised. Passwords must be composed of characters from at least three of the following four groups from the standard keyboard: • Upper case letters (A-Z) • Lower case letters (a-z) • Arabic numerals (0-9) • Non-alphanumeric characters (punctuation symbols)
Restrictive Controls Either Party may use protective network traffic management controls such as 7-digit and 10-digit code gaps set at appropriate levels on traffic toward each other's network, when required, to protect the public switched network from congestion due to facility failures, switch congestion, or failure or focused overload. CLEC and CenturyLink will immediately notify each other of any protective control action planned or executed.
Expansive Controls Where the capability exists, originating or terminating traffic reroutes may be implemented by either Party to temporarily relieve network congestion due to facility failures or abnormal calling patterns. Reroutes will not be used to circumvent normal trunk servicing. Expansive controls will only be used when mutually agreed to by the Parties.
Customer Focus Is dedicated to meeting the expectations and requirements of internal and external customers; gets first hand customer information and uses it for improvements in products and services; acts with customers in mind; establishes and maintains effective relationships with customers and gains their trust and respect Integrity and Trust Is widely trusted; is seen as a direct, truthful individual; can present the unvarnished truth in an appropriate and helpful manner; keeps confidences; admits mistakes; doesn’t misrepresent him/herself for personal gain. Drive For Results Can be counted on to exceed goals successfully; Is constantly and consistently one of the top performers; very bottom line oriented; steadfastly pushes self and others for results. Role Specific Competencies Priority Setting Spends his/her time and the time of others on what’s important; quickly zeros in on the critical few and puts the trivial many aside; can quickly sense what will help or hinder accomplishing a goal; eliminates roadblocks, creates focus. Managing and Measuring Work Clearly assigns responsibility for tasks and decisions; sets clear objectives and measures; monitors process, progress, and results; designs feedback loops into work. Interpersonal Savvy Relates well to all kinds of people - up, down, and sideways, inside and outside the organization; builds appropriate rapport; builds constructive and effective relationships; uses diplomacy and tact; can defuse even high-tension situations comfortably. KEY RELATIONSHIPS Within Southern DHB External to Southern DHB • Chief Nursing and Midwifery Officer • Patients, Families and Xxxxxx • Directors of Nursing • Nursing Council/Midwifery Council • Associate Directors of Nursing • Unions • Directorate Leadership Team • Other District Health Boards • Clinical Nurse Co-ordinators • HWNZ • Nursing Staff • NZNO and other relevant professional colleges of nursing and midwifery • Medical Staff • Community Members • Allied Health Staff • Educational Institutions • Administration Staff • PHO • Southern DHB wide staff • GP’s • Duty Manager(s) • NGO’s and Aged Care Sector PERSON SPECIFICATION The expertise required for a person to be fully competent in the role. Position specific competencies: ESSENTIAL DESIRABLE Education and Qualifications (or equivalent level of learning) • Registration as a Registered Nurse with the Nursing Council of New Zealand. • Hold a current Nursing Council of New Zealand Annual Practising Certificate. • Competent Professional Development and Recognition Programme (PDRP) profile/portfolio or equivalent. Experience • One years’ post graduate (Nurse Entry to Practice or equivalent) experience, or be undertaking this currently. • Please refer to area specific person specification if applicable. • Experience in an equivalent clinical setting to which you are being employed into. Knowledge and Skills • Advanced communication techniques such as conflict resolution, diffusion and mediation skills. • Demonstrate professional accountability within scope of practice.