Configure PatientSecure for Imprivata Patient Privacy Intelligence

Access to this Admin Console page is only available to Owners.

For customers using both PatientSecure and Imprivata Patient Privacy Intelligence (formerly Imprivata FairWarning), configure PatientSecure to allow Patient Privacy Intelligence to consume data exported from PatientSecure, so that you can review audit reports in Patient Privacy Intelligence.

Patient Privacy Intelligence reports take your PatientSecure system’s audit logs and transform them into easy-to-analyze data. You can build Reports to learn about user behavior over a set period of time, system health, and more.

Patient Privacy Intelligence offers multiple ways to report on users, patients, and event log data being parsed into your application. You can build a custom Report, start with a template from the Report Library, or utilize a built-in Quick Report tool.

A Report takes the data in your system and provides helpful information based on the criteria you set. Reports in Patient Privacy Intelligence help to provide an organized data set that can include a table and charts.

About Patient Privacy Intelligence

Patient Privacy Intelligence provides the most comprehensive and established privacy monitoring solution available by combining the power of artificial intelligence, behavioral analytics, and human expertise. The industry-leading platform can help you tackle the full expanse of your challenges to prevent insider threats, outside attacks, and system compromises from exposing your organization's sensitive data.

Patient Privacy Intelligence helps you:

• Monitor enterprise applications—detect internal threats and quickly spot risky behavior to reduce risk and improve security.

• Protect patient data—safeguard PHI from snooping or inappropriate record modification to build patient trust.

• Watch for drug diversion—keep patients safe by spotting anomalous behavior and instances of improper access and administration.

What Information is Sent to Patient Privacy Intelligence

The PatientSecure report audits the viewing, editing, and deleting of information from the PatientSecure Admin Console Patient Details page.

Fields include:

• Event ID. A PatientSecure created GUID for each audit record.

• Patient data, including patient identifier, patient first and last name, and date of birth (DOB).

• User data for the user signed in to the PatientSecure Admin Console

• Application event data, including date and time, event type, the PatientSecure module being accessed, the IP address, and the user's role in PatientSecure Admin Console

The report that is generated includes:

• The date range for the previous day, midnight through 11:59:59PM, using the PatientSecure Admin Console time.

• The output file name will be fw-CUSTOMER-PatientSecure-YYYYMMDD.log

  where:

  • CUSTOMER is the name in the Company field on the license

  • YYYYMMDD is the start date of the data, using the PatientSecure Admin Console timezone.

Assumptions

This topic assumes the following:

• You received SFTP file share information from the Patient Privacy Intelligence customer support team, including:

  • Server and port number

  • Account username and password

Before You Begin

Step 1: Configure the Integration with Patient Privacy Intelligence

Configure the integration with Patient Privacy Intelligence to monitor improper access to patient data from within PatientSecureAdmin Console.

To configure the integration:

1. In the Admin Console, go to Settings > Imprivata Integrations. The default is OFF.

2. Enable the Patient Privacy Intelligence Integration setting.

In the Settings section, configure the following settings:

1. In the Scheduled Run Time drop-down list, type or select a run time. The default is 03:00 AM daily. This time represents the local time and time zone on the PSWS server.

2. In the Patient Identifier drop-down list, select the identifier to base the report on.

3. Add a new SFTP share, or select an existing file share.

   1. To add a new file share for PPI, click Add a new SFTP share.

      1. Protocol Type Select the SFTP file share protocol from the drop-down list.

      2. Server. Enter the information that corresponds to the file share protocol selected:

         • For a SSH File Transfer Protocol (SFTP) site, enter the SFTP address and port number provided by the Patient Privacy Intelligence customer team:

           For example:

           sftp://examplePPIServer.example.com and port 22.

      3. Account Username: Enter the username for an account with read and write access to the file share, provided by the Patient Privacy Intelligence customer team.

      4. Account Password: Enter the password for the account to access the file share.

   2. To use an existing FairWarning file share you created earlier, select it from the Export File Share drop-down list and type the folder name in the Folder box.

4. Click Save.

   The configuration is saved and the scheduled report runs daily at the specified time.

Step 2: Generate a Sample File

After configuring the export file share, generate a sample file for use in testing.

• To save a generated file to the SFTP server, click Save file to SFTP. The report is run immediately and saved to the STFP file share.

• To download a generated file, click Download file. The report is run immediately and is exported to a pipe-delimited .CSV file (with the .log file extension) in the Downloads folder on your local drive.

Send a File for a Specific Date

If Patient Privacy Intelligence doesn't receive a daily file, the customer support team will send out a notice indicating the missed date.

To send a file for a specific date:

1. Enter the date, or click and select the date.

2. Click Send file to SFTP.