[Gnumed-devel] Re: CCHIT - sql

[Jim Busser]

On 2009-11-07, at 10:52 AM, Jim Busser wrote:

2. Lack of having implemented a non-doctor class of user (and associated permissions) may be one of the first things that would be needed for CCHIT.

From CCHIT test script:

2011 Test Script – Ambulatory + Child Health + Cardiovascular Page 2 of 1272011 Certification of Ambulatory EHRs October 27, 2009 © 2009 Certification Commission for 

Users

 There must be five Physician type users with valid login. These users must have at least the following permissions: full access to all clinical functions. o Dr. Robert Alexander – Primary Care Physician in scenario 1 o Dr. McCoy - OB/GYN in scenario 2 o Dr. Internist E. Butler – Internist in scenario 3

o Dr. Jones – Internist

o Dr. Green – Cardiologist in CV scenario  There must be one Nurse Practitioner type user with valid login. This user must have at least the following permissions: access to all clinical functions.

o Ellen Thompson, CFNP – for use in Scenario 1  There must be one Nurse type user with valid login. This user must have at least the following permissions: access to all clinical functions.

Proctor to update the Audit Trail Worksheet are highlighted in cyan

Child Health Certification or Cardiovascular Certification are highlighted in purple

items that are required ONLY for CV Advanced Reporting Capability Certification are highlighted in green

optional for 2011 are highlighted in yellow

Health Information Technology

 There must be one Reception type user with valid login. This user must have access to only the following functions: registration and demographic functions.

 There must be one Medical Assistant type user with valid login. This user must have at least the following permissions: access to all clinical functions.  There must be one Office Manager type user with valid login. This user must have at least the following permissions: access to all clinical functions and

access to all information necessary to carry out test procedures 4.72 to 4.86.  There must be one Security Administrator type user with valid login. This user must have at least the following permissions: access to all information

necessary to carry out security administrative tasks; no rights to access clinical data or Protected Health Information (PHI) as defined by the Centers for Medicare and Medicaid Services (CMS).

o See page 8374, section 160.103 Definitions in CMS site: http://www.cms.hhs.gov/SecurityStandard/Downloads/securityfinalrule.pdf