12VAC5-115-50: Security

A. The VIIS system shall automatically inactivate a user session after a predetermined period of inactivity as determined by VITA security policy.

B. The VIIS system shall inactivate a participant’s account, denying access to the system when the participant has not logged into the system after a predetermined period of time, as determined by VITA security policy. If the participant requests reactivation of the account, VDH shall review the request and may reactivate the account, granting continued access to VIIS.

C. There shall be a secure encrypted connection, as determined by VITA or VDH, between VIIS and the participating organization sending or receiving data if data exchange is performed.