...
Loss or theft of a Mobile Computing Device and Removable Media must be reported immediately. The following steps must be taken:
- Immediately report the loss or theft to the IRT Service Desk.
- Report loss, theft, or unauthorized access to your manager.
- The Compliance Office must be notified if the information contains sensitive ePHI.
- All incidents must be reported to the Information Security Office regardless of whether there is sensitive information involved or not.
VIII. NON-COMPLIANCE SANCTIONS
...