March 5, 2025

Enhancing and simplifying ways to manage enterprise applications

VUMC continues to improve security across the enterprise by enhancing and simplifying ways to manage data, information, and applications. To maintain this initiative, we are asking employees to review the updated policies and procedures below. In addition, a training course will be emailed directly to impacted employees and staff. The training must be completed by June 30.

Prohibited Technology (SOP)Application Inventory – VUMC
Use of Online Tracking TechnologiesApplication Inventory – VUMC (SOP)
Vulnerable Systems Management (SOP)Audit Logs and Activity Review for Electronic Systems and Applications Containing Protected Health Information
Secure TechnologyAudit Log Review Plan (SOP)
Secure Technology Review and Approval (SOP)Security Patch Management Compliance
Acceptable Use of Artificial IntelligenceSecurity Patch Management and Validation (SOP)
Review and Approval of Artificial Intelligence TechnologiesInformation System Data Backup and Backup Retention
Cloud Computing and ServicesInformation System Data Backup and Backup Retention (SOP)
Use of Private or Restricted Data in Non-Production SystemsDecommissioned Systems and Data Archival, Maintenance, Authorization and Access

Through the training, employees learn more about the importance of enhancing the management of software applications across the VUMC enterprise and review relevant policies and standard operating procedures (SOPs).