Information Security

Information Security is responsible for helping the UAB community protect information assets. This includes minimizing risk in new and existing system deployments, providing information on vulnerability mitigation, and assisting with specific updates. Information Security coordinates with other IT divisions for several activities including incident response, vulnerability scanning.

Current Policies & Standards related to Information Security:

• Acceptable Use Policy
• Data Custodian Responsibilites
• HIPAA Standards
• Information Disclosure and Confidentiality Policy
• Portable Computing Device Security - Laptop Standard
• UAB Data Protection and Security Policy
• UAB IT Security Practices
• UAB/UABHS Information Security Handbook

Information Technology policies and guidelines may be viewed on our IT Related Policies page. HIPAA standards are available from the HIPAA website.

Incident Reporting

If you have a confirmed or suspected security breach:

• If the incident requires immediate attention, call 205-975-0842.  If no one answers, follow the voice mail instructions.
• Otherwise, visit the Incident Handling Procedures page to determine the next steps to be taken.

Contact Information: