EMR Security Warning – Cease use of QR Codes for employee passwords

The creation of QR codes for employee passwords represents a major password exposure risk and is NOT accepted or approved at Monash Health. You are fully responsible for ensuring the safety of your login credentials and password at all times.

 

  • If you have created a QR code for your employee password, please dispose of it immediately in a confidential document disposal bin.

 

  • Anyone who continues to use a QR code for their password may face disciplinary action.

 

  • Generating, using and keeping QR codes for employee passwords could place Monash Health at risk of an IT security breech.

 

This is a reminder that:

 

  • You must always type in your password manually when signing as the witness for the administration of medications, infusions, blood transfusions and expressed breast milk. QR codes are not an approved substitute, and;

 

  • You must always tap off your WOWs or other computing device when you move away from it or when you have finished documentation.

 

These workflows form an electronic signature in the EMR and, as such, should always be undertaken to protect your credentials.