With continued computerisation of clinical, financial and practice records data security is vital for general practice. The General Practice Computing Group (GPCG) has developed and provided to all general practices a Security Self-Assessment Guideline and Checklist for General Practices.
After 1 July 2005, any practice signing up for the first time OR any practice already on Broadband For Health will be required to complete a “Security Awareness & Conformance Audit” which is based on the GPCG checklist.
There will be an incentive payment (on top of the subsidy) to assist practices with Audit compliance during 2005-06. This will be approximately $1000 per UIN (or practice). This money can be used by the practice, for example, to pay an IT support person to help them comply with the checklist, purchase additional software/hardware etc
The division has developed additional resources to help you manage a computer system.
The resources below will also help you comply with the changes to the PIP IM/IT Incentive from November 2006.
IM Security Resources
The General Practice Computing Group (GPCG) and RACGP has requested that we link any of their resources to the RACGP or GPCG website rather than hosting copies of our files on our website. This means you will have to navigate your own way to these resources. This makes it harder for you to find them. Good luck!!
Computer (IT) Policies and Procedures Manual - this is a Word template from GPCG to assist you to create your own manual to comply with point 5 on the IM/IT PIP Application Form (Word).
Computer Security Checklist - this 1-page checklist helps you determin whether you have established reasonable computer security measures in your general practice to counter IT risk (pdf)
Computer Security in General Practice - produced by NEVDGP this double-sided sheet explains how to combat viruses, spam and other nasties. Includes a checklist for security and maintenance with links to important GPCG documents on security and firewalls. (pdf)
Firewall Guideline and checklist - produced by GPCG and is aimed at increasing awareness and understanding of firewalls in General Practice computer systems
Firewall Tutorial - produced by GPCG this on-line tutorial is a reference for practice managers, IT service providers and GPs to help you understand and maintain the firewall best suited to your medical practice