[MEDITECH-L] MIS PASSWORD PARAMETERS - MAGIC 5.61

1 view
Skip to first unread message

m.bu...@ohiovalleyhospital.org

unread,
Jul 24, 2008, 10:57:56 AM7/24/08
to medit...@mtusers.com, j.pol...@ohiovalleyhospital.org

We recently got the results back from an IT audit performed earlier this
year. The auditors suggested that we change some of our password
parameters to match "industry standard" . Can you please share how your
MIS password parameters are set up?

New passwords specified by User or System?
Password Minimum Length?
Any Password Format?
Password Change Interval (# of days)?
Password Re-Use Interval (# of days)?
Encrypt or Hide Passwords in MIS User?

Thanks in advance for any responses!
Michele J. Butter
Clinical Systems Analyst
Information Management
Pittsburgh's Ohio Valley General Hospital
25 Heckel Rd.
322 Laird Davis Center of Learning
McKees Rocks, PA 15136
412-777-6915
412-777-6532 (fax)
m.bu...@ohiovalleyhospital.org

Confidentiality Notice:
This e-mail message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message.

====================================

Keep up to date on recent announcements about MUSE by visiting the meditech-l web site at MTUsers.net and go to the tab labeled "MUSE - Dallas 05/08"

If you want to ask a question from the meditech-l users who will be attending MUSE or share something about MUSE with each other, you can post messages on the web site on the tab "MUSE - Dallas 05/08"

Julie Carlson

unread,
Jul 24, 2008, 11:37:37 AM7/24/08
to m.bu...@ohiovalleyhospital.org, medit...@mtusers.com, j.pol...@ohiovalleyhospital.org
Here are ours - we are Magic 5.5 SR3.

New passwords specified by User or System? - SYSTEM
Password Minimum Length? N/A (since they are system defined)
Any Password Format? AANNNN
Password Change Interval (# of days)? 365
Password Re-Use Interval (# of days)? NO ENTRY
Encrypt or Hide Passwords in MIS User? NO (If you set this to YES, my
understanding is you can never change it back).

Julie Carlson
Systems Analyst
Cascade Valley Hospital and Clinics
Arlington, WA 98223
(360)618-7866
jul...@cascadevalley.org

====================================


*****************************************************************

DISCLAIMER -
Email is not considered secure. Confidentiality risks are assumed by choosing to communicate with Cascade Valley Hospital and Clinics by email. The information contained in this e-mail is confidential, privileged, or otherwise protected from disclosure. It is intended only for the use of the authorized individual as indicated in the e-mail. Any unauthorized disclosure, copying, distribution or taking of any action based on the contents of this material is strictly prohibited. Please do not rely on e-mail to communicate health concerns or confidential information. If you have received this e-mail in error, please notify the sender and delete it immediately.

Alice Rogers

unread,
Jul 24, 2008, 12:31:03 PM7/24/08
to Julie Carlson, m.bu...@ohiovalleyhospital.org, medit...@mtusers.com, j.pol...@ohiovalleyhospital.org
Do most organizations only change their password every 365 days. We use to
do it every 60 and then got brave and changed it to 180. Just curious


This message, together with any attachments, is intended only for the
use of the individual or entity to which it is addressed and may contain
information that is confidential and prohibited from disclosure. If you
are not the intended recipient, you are hereby notified that any
dissemination, or copying of this message, or any attachment, is
strictly prohibited. Please notify the original sender immediately by
telephone or by return E-mail and delete this message along with any
attachments, from your computer. Thank you.
This e-mail is Property of UMH24/7/2008

Brindlinger, Jacqui

unread,
Jul 24, 2008, 7:36:49 PM7/24/08
to m.bu...@ohiovalleyhospital.org, medit...@mtusers.com, j.pol...@ohiovalleyhospital.org
New passwords specified by User or System? BY USER
Password Minimum Length? 6
Any Password Format? LETTERS & NUMBERS
Password Change Interval (# of days)? 90
Password Re-Use Interval (# of days)? 180
Encrypt or Hide Passwords in MIS User? HIDE

Jacqui Brindlinger
Clinical Analyst
Mercy Medical Center
Canton OH 44708

330-489-1111 x4245
Jacqui.Br...@csauh.com


-----Original Message-----
From: meditech-...@mtusers.com
[mailto:meditech-...@mtusers.com] On Behalf Of
m.bu...@ohiovalleyhospital.org
Sent: Thursday, July 24, 2008 10:58 AM
To: medit...@mtusers.com
Cc: j.pol...@ohiovalleyhospital.org
Subject: [MEDITECH-L] MIS PASSWORD PARAMETERS - MAGIC 5.61

====================================

-----------------------------------------
The enclosed information is STRICTLY CONFIDENTIAL and is intended
for the use of the addressee only. CSAHS/UHHS-Canton, Inc and its
affiliates disclaim any responsibility for unauthorized disclosure
of this information other than the addressee.

Federal and Ohio law protect patient medical information disclosed
in this email, including psychiatric disorders, (HIV) test results,
AIDs-related conditions, alcohol, and/or drug dependence or abuse.
Federal regulation (42 CFR Part 2) and Ohio Revised Code section
5122.31 and 3701.243 prohibit disclosure of this information
without the specific written consent of the person to whom it
pertains, or as otherwise permitted by law.</p>

TSL...@cho.org

unread,
Jul 25, 2008, 3:27:25 AM7/25/08
to medit...@mtusers.com

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

New passwords specified by User or System? SYSTEM
Password Minimum Length? N/A

Any Password Format? LETTERS & NUMBERS
Password Change Interval (# of days)? 180
Password Re-Use Interval (# of days)? N/A

Encrypt or Hide Passwords in MIS User? HIDE

Thomas Stephen Laxar
Coordinator, Hospital Information Systems
Children's Hospital Oakland
510-428-3833
tsl...@cho.org


The email message (and any attachments) is for the sole use of the intended
recipient(s) and may contain confidential information. Any unauthorized

review, use, disclosure or distribution is prohibited. If you are not the
intended recipient, please contact the sender by reply email and destroy all
copies of the original message (and any attachments).
--------------------------------------------------------------------------------
Return-Path: <"Brindlinger, Jacqui" <Jacqui.Br...@csauh.com>>
Received: from smtp2.mail.cho.org by cho.org; Thu, 24 Jul 2008 16:52:18 0000
Received: from smtp2.mail.cho.org ([192.168.1.39])
by smtp2a.mail.cho.org with ESMTP; Thu, 24 Jul 2008 16:51:51 -0700
X-ASG-Debug-ID: 1216943506-441e00bf0000-tQnRVc
X-Barracuda-URL: http://192.168.1.39:8000/cgi-bin/mark.cgi
Received: from host3.emwd.com (localhost [127.0.0.1])
by smtp2.mail.cho.org (Spam Firewall) with ESMTP id 79A177FDAE2
for <tsl...@cho.org>; Thu, 24 Jul 2008 16:51:46 -0700 (PDT)
Received: from host3.emwd.com (host3.emwd.com [72.52.162.75]) by smtp2.mail.cho.org with ESMTP id RF12KtWMu9PYSH5F for <tsl...@cho.org>; Thu, 24 Jul
2008 16:51:46 -0700 (PDT)
X-ASG-Whitelist: Sender
Received: from localhost ([127.0.0.1]:44987 helo=host3.emwd.com)
by host3.emwd.com with esmtp (Exim 4.69)
(envelope-from <meditech-...@mtusers.com>)
id 1KMAMx-0000C9-KE; Thu, 24 Jul 2008 19:37:11 -0400
Received: from ironmail1.csauh.com ([69.54.56.10]:3463)
by host3.emwd.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69)
(envelope-from <jacqui.br...@csauh.com>) id 1KMAMu-0000BW-3H
for medit...@mtusers.com; Thu, 24 Jul 2008 19:37:08 -0400
Received: from ([10.46.25.123])
by ironmail1.csauh.com with ESMTP id 4420122.20883195;
Thu, 24 Jul 2008 19:36:49 -0400
Received: from csauhex02.csauh.com ([10.45.5.100]) by csauhex01.csauh.com with
Microsoft SMTPSVC(6.0.3790.1830); Thu, 24 Jul 2008 19:36:49 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Thu, 24 Jul 2008 19:36:49 -0400
Message-ID: <B9A8C7549DCFE748BFF6...@csauhex02.csauh.com>
In-Reply-To: <OFB96AFBC9.D959F15D-ON852574...@ohiovalleyhospital.org>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [MEDITECH-L] MIS PASSWORD PARAMETERS - MAGIC 5.61
Thread-Index: Acjtn/CdGOEzPBfLTMORmnX4nAVqywARgRGg
References: <OFB96AFBC9.D959F15D-ON852574...@ohiovalleyhospital.org>
From: "Brindlinger, Jacqui" <Jacqui.Br...@csauh.com>
To: <m.bu...@ohiovalleyhospital.org>,
<medit...@mtusers.com>
X-OriginalArrivalTime: 24 Jul 2008 23:36:49.0864 (UTC)
FILETIME=[24F95480:01C8EDE6]
X-EMWD-MailScanner: Not scanned: please contact your Internet E-Mail Service
Provider for details, Not scanned: please contact your Internet E-Mail Service Provider for details
X-EMWD-MailScanner-SpamCheck: ,
X-Spam-Status: No, No
Cc: j.pol...@ohiovalleyhospital.org
X-ASG-Orig-Subj: Re: [MEDITECH-L] MIS PASSWORD PARAMETERS - MAGIC 5.61
Subject: Re: [MEDITECH-L] MIS PASSWORD PARAMETERS - MAGIC 5.61
X-BeenThere: medit...@mtusers.com
X-Mailman-Version: 2.1.9.cp2
Precedence: list
List-Id: Email list for Meditech users <meditech-l_mtusers.com.MTUsers.com>
List-Unsubscribe: <http://mtusers.com/mailman/listinfo/meditech-l_mtusers.com>,
<mailto:meditech-...@mtusers.com?subject=unsubscribe>
List-Post: <mailto:medit...@mtusers.com>
List-Help: <mailto:meditech-...@mtusers.com?subject=help>
List-Subscribe: <http://mtusers.com/mailman/listinfo/meditech-l_mtusers.com>,
<mailto:meditech-...@mtusers.com?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: meditech-...@mtusers.com
Errors-To: meditech-...@mtusers.com
X-EMWD-MailScanner-Information: Please contact the ISP for more information
X-MailScanner-ID: 1KMAMx-0000C9-KE
X-EMWD-MailScanner-From: meditech-...@mtusers.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host3.emwd.com
X-AntiAbuse: Original Domain - cho.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mtusers.com
X-Barracuda-Connect: host3.emwd.com[72.52.162.75]
X-Barracuda-Start-Time: 1216943507
X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at mail.cho.org

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Julia Carter

unread,
Jul 24, 2008, 3:31:25 PM7/24/08
to Alice Rogers, Julie Carlson, m.bu...@ohiovalleyhospital.org, medit...@mtusers.com, j.pol...@ohiovalleyhospital.org
I've got passwords to several facilities and all are set to change every
90 days.

Julia Carter, CPAR
Consultant
Consultant People
396 W Main Street
Lewisville, TX 75057-3866
( 229-317-0688
+ julia....@cpeople.org
e http://www.cpeople.org

Alison Cooper

unread,
Jul 24, 2008, 12:41:46 PM7/24/08
to Alice Rogers, Julie Carlson, m.bu...@ohiovalleyhospital.org, medit...@mtusers.com, j.pol...@ohiovalleyhospital.org
This is what we have - at one point we had it set so the user didn't
even see the login but got a new IS Director who let us put it back so
you would see it.
New passwords specified by User or System? - USER
Password Minimum Length? 8
Password Format? BLANK
Password Change Interval (# of days)? 90
Password Re-Use Interval (# of days)? BLANK
Encrypt Passwords in MIS User? YES

-----Original Message-----
From: meditech-...@mtusers.com
[mailto:meditech-...@mtusers.com] On Behalf Of Alice Rogers
Sent: Thursday, July 24, 2008 12:31
To: Julie Carlson; m.bu...@ohiovalleyhospital.org;
medit...@mtusers.com
Cc: j.pol...@ohiovalleyhospital.org

Kempel, Alice J.

unread,
Jul 24, 2008, 4:27:22 PM7/24/08
to Alice Rogers, Julie Carlson, m.bu...@ohiovalleyhospital.org, medit...@mtusers.com, j.pol...@ohiovalleyhospital.org
In Magic (for 13 years), we have expired passwords (system assigned)
every 365 days. In Client Server, we have decided to expire the
passwords (user defined) at 180 days.

Alice Kempel RN
FHN
Senior Applications Consultant
Freeport, IL 61032
815-599-6783
This e-mail message and any attached file(s) is intended for the use of


the individual or entity to which it is addressed and may contain

information that is privileged and confidential. If the reader of this
message is not the intended recipient or an agent or employee of the
intended entity, you are hereby notified that any dissemination,
distribution, or copying of this communication is strictly prohibited.
If you have received the message in error, please notify the sender
immediately for instructions. Thank you.

-----Original Message-----
From: meditech-...@mtusers.com
[mailto:meditech-...@mtusers.com] On Behalf Of Alice Rogers
Sent: Thursday, July 24, 2008 11:31 AM
To: Julie Carlson; m.bu...@ohiovalleyhospital.org;
medit...@mtusers.com
Cc: j.pol...@ohiovalleyhospital.org

====================================


This email message and any attached file(s) is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this message is not the intended recipient or an agent or employee of the intended entity, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received the message in error, please notify the sender immediately for instructions. Thank you.

Reply all
Reply to author
Forward
0 new messages