Health Information Systems Security Survey 2002

How does the Residential Care Industry Compare?

---

Dear Fellow Professionals,

Security in Health Information is an area of concern to the Consumer, the Health Care Providers and the New Zealand Government.

I would like to invite you to participate in this pilot survey, which is undertaken in preparation of my master's thesis in Health Informatics at Otago University in 2003.
The thesis investigates if health professionals are meeting the minimum-security requirements for Health Information Systems (HIS) in the New Zealand Health Service.

The pilot survey is undertaken in the facilities of a large residential care provider North Island and is targeted to Managers, Care Managers, R/N’s and Administrators
This survey has been reviewed and approved by the General Manager Elderly Care of this residential care provider.

The purpose of this pilot survey is to test the survey questions on health professionals prior to the master's thesis and research survey, which will take place within one of the District Health Boards of New Zealand.

As a precautionary step, the individual survey information is maintained confidential. A summary of the results may be submitted for publication in a peer review or professional journal. Neither the identity of the participants not the organization will be revealed at any stage.

This survey will take about 15 minutes to complete.
Please reply before the 18^th of May 2002

Han Roeters - RGON, Nurse Anaesthetist (NL), Dip.Management for Non Profit Org. (NL)
Manager Reevedon Complex

PO Box 142

Levin 5500

New Zealand

Email roeters.nz@xtra.co.nz

---

About eligibility to take part in this survey

1.1.	Do you use Resident Information computer programs e.g. Electronic care planning, board program, other resident database or spread sheet programs in use in your workplace?
	Please tick one box only, if your answer to this question is No, go to question 8.1 and do not complete any other parts of this survey
	Yes No

About the Virus Screener of the computer that contains resident information

2.1.	Does your facility's computer have a virus screener?
	Please tick one box only, if the answer to this question is No, go to question 3.1
	Yes No
2.2.	How often is the computer's virus screener updated?
	Please tick one box only
	More often than weekly Weekly Fortnightly 3 Weekly Monthly / Less than once a month Never
2.3.	Are you responsible to update the virus screener?
	Please tick one box only
	Yes No Don't know
2.4.	How often is your computer scanned for viruses
	Please tick one box only
	Monthly / Less than once a month Fortnightly Weekly More often than weekly Never
2.5.	Is the virus screener set to automatically scan all incoming information?
	This includes Internet downloads, Email, Opening documents etc. Please tick one box only
	Yes No Don't know

About Access to the computer containing resident information

3.1.	How many staff can log on to the same computer, that you would normally work on?
	Please tick one box only
	1 2 3 4 More than 4
3.2.	Is the computer you normally work on password protected?
	Please tick one box only
	Yes No Don't know
3.3.	How many times do you need to enter a password before your computer programme is operational?
	Please tick one box only
	1 2 More than 2 Don't know
3.4.	Do all staff operating the same computer have individual passwords to access the Resident Information programmes?
	Please tick one box only
	Yes No Don't know
3.5.	Do you know the password to open the computer of any other staff members?
	Please tick one box only
	Yes No
3.6.	Do you sometimes share your password to access information on the computer with other staff?
	Please tick one box only
	Yes No
3.7.	Do you store your Resident Information computer's passwords in a fire proof safe or comparable save storage?
	Please tick one box only
	Yes No
3.8.	Does the computer that contains Resident's Information have a screen saver password?
	Yes No Don't know
3.9.	Does the computer that contains Resident's Information carry an administrator's password that can override all other passwords?
	Please tick one box only
	Yes No Don't know
3.10.	What is the minimum amount of characters you need to enter for any of the passwords to access the computer?
	Please tick one box only
	Less than 3 3 to 5 More than 5 No password
3.11.	What keyboard keys make up the password that gives access to the computer that contains Resident Information?
	Note! Please tick ALL appropriate boxes
	Letters Numbers Symbols ($ > ? & etc)
3.12.	Are the individual files on your hard drive that contain potentially sensitive information password protected?
	Please tick one box only
	Yes No Don't know

About Backup

4.1.	Does your Resident Information computer have a backup facility, e.g. floppy disk drive, Zip drive, CD writer or backup via network to another computer or server?
	Please tick one box only
	Yes No Don't know
4.2.	How often is the information on your Resident Information Computer Backed up
	Please tick one box only
	Daily or more frequent Once a week Fortnightly Less frequent then fortnightly Don’t know

About Encryption (This means scrambling of information or secret writing)

5.1.	When you sent files containing potentially sensitive information by Email, are they encrypted or password protected?
	Please tick one box only
	Yes No Don't know
5.2.	When you sent files containing potentially sensitive information by Email or via the Internet do you provide a digital signature to authenticate the sender?
	Please tick one box only
	Yes No Don't know

About Audit Trails

6.1.	Does you computer system log an audit trail?
	Please tick one box only, if your answer is Yes, go to Question 6.2, otherwise continue at question 7.1
	Yes No Don't know
6.2.	How often is your Resident Information computer audit trail checked?
	Please tick one box only
	Daily or more frequent Every 2nd day to weekly Less frequent then weekly Don't know

Some General Security Questions

7.1.	Has your employer provided you or have you ever received any education in regard to computer security?
	Please tick one box only
	Yes No
7.2.	Do you ever download files from the internet onto the computer that contains Resident Information?
	Please tick one box only
	Yes No
7.3.	Is the computer that contains Resident Information networked with other computers or a server?
	Yes No Don't know

About Yourself

8.1.	Which of the following best describes your occupation?
	Please tick one box only
	Management Administration Nursing
8.2.	What is your gender?
	Please tick one box only
	Female Male
8.3.	What age group are you in?
	Please tick one box only
	Under 21 21-30 31-40 41-50 51-60 Over 61
8.4.	How long have you been working in your current position?
	Please tick one box only
	Less then 1 year Between 1 and 5 years Between 6 and 10 years More then 10 years

---

I agree that completing this survey, implies to have information from my responses published in a non-identifying manner - within the jurisdiction of the New Zealand Privacy Act 1993.

---

Thank you for participating

This form was built with Infopoll Designer. (http://infopoll.com/)