Login Monitoring

Agencies must implement procedures for monitoring login attempts and reporting discrepancies. This is an addressable task.

Windows servers have the ability to log successful and unsuccessful login attempts. These logs should be regularly reviewed to look for anything out of the ordinary. Other products can be purchased that can make this monitoring easier.

Login logs may also be available for specific applications that contain EPHI. These logs should be reviewed regularly as well.

A procedure needs to be in place to handle any abnormal results in these logs.