Due to the nature of the health care industry, security is a high priority for protecting Protected Health Information (PHI) and Personal Identifiable Information (PII).
ND MMIS is protected by using several firewalls between the Internet and the databases and repositories that store the PHI and PII information.
The Internet Firewall, which is the first firewall, protects unwanted intrusions coming directly from the Internet. All North Dakota MMIS Web Portal activity is filtered through a front end called WebSEAL before it can pass through the second firewall.
WebSEAL ensures that the proper Universal Resource Locators (URLs) are being used and the user has permission to log on to the secured areas of North Dakota MMIS Web Portal.
The Application firewall, which is the second firewall, protects the applications and its storage units. Information that passes through the WebSEAL front-end is processed by ND MMIS. When no errors exist in the data, the information is sent through the third firewall to be stored in the databases or repositories.
The third firewall, the Data firewall, protects the databases and repositories where the PHI and PII data resides.
The structure of security for the ND MMIS system contains several layers:
The Organization is the first level of security while the second layer is Organization Types:
The Organization Type is also the identifier for the Organization security layer. For example, the State Organization's label is "STATE" and STATE is also the Organization Type for the State Organization.
The third layer of security is roles. Each organization has a set of roles associated with its Organization Type. For example, the Contact Management Staff and the Provider Enrollment Specialist are roles within the State Organization Type.
A role is a configurable, defined group of privileges. Each role contains one or more privileges. The ND MMIS system controls the privileges a person has on a page (the view contained within the portlet).
There are three types of administrators for ND MMIS:
Version as of 5/16/14.
Copyright © 2017 Conduent, Inc. All rights reserved. Conduent and Conduent Agile Star are trademarks of Conduent, Inc. and/or its subsidiaries in the United States and/or other countries.