Stryker SDC3, Manual

Page: 10 / 100

4
Recommended Security Practices
The following security practices protect patient health information (PHI) archived on the device
from data security threats� Stryker strongly recommends that all customers enable the following
security practices�
Access Control Enable account access controls through the “Active Directory
Authentication” feature; assign passwords for both Administrators
and Operators (see the Setting Up Access Control section)�
If “Active Directory Authentication” is not enabled, assign
passwords for both Administrator and Operator user levels�
Limit device access to authorized users per hospital policy (e�g�
limit access to the protected health information (PHI) archived
on the device by abiding the account’s physical, technical and
administrative safeguards)�
Authentication and
Encryption (when
connecting to the
hospital’s network) Connect the device through a secure hospital network, preferably
WPA2 AES (PEAP-MSCHAP v2 authentication), using AES
encryption� Note: this section is also repeated under Technical
Specification�
External storage devices Limit transfer of data from the device as well as the use of external
storage devices per the account’s data privacy policy� (e�g� limit
data transfer from the device to external storage devices provided
by the account with encryption and password protection levels
approved by account)�
Follow the account’s policy regarding custody and control of
external storage devices (i�e� limit controls of external transfer
devices to a designated group within the account; do not allow
employees to leave the account with external storage devices
containing PHI�)
Data Security and
Encryption options
(at rest) Disable the “Patient Data Export” option when transferring
archived cases from the device to external media� Go to the Save
Settings screen and uncheck “External Media Options� (see the
Save Settings section)�
If “Patient Data Export” capability is activated, enable the
“Encryption” option when transferring and storing archived data to
external media� (see the Save Settings section)�