Removable media

["Worrell, Brian" <BWorrell () isdh IN gov>]

 Hello, 

I am curious if anyone has a policy or can reference a policy, about
removable media. After all the losses of backup tapes, CD's and USB
flash drives being discussed in the media, this topic has become more
important than I think it has been in the past.

What are some of you doing to track media with sensitive information,
such as ePHI or SSN, on it, or how are you tracking if someone copies
information to a removable media device? 

 
 
Thank you,
 
Brian Worrell
Information Security Manager and Security Officer
Office of HIPAA Compliance
Indiana State Department of Health
2 North Meridian Street
Indianapolis, IN  46204
o: (317) 233-4945