A new nurse, aide or business office hire walks in on the first day eager to start. Too often, the computer is not ready, the login does not work and someone borrows a coworker's password just to get through the shift. That is frustrating for the employee and a genuine security and compliance problem.
A consistent onboarding process fixes this. Here is a checklist to share between HR, department managers and your IT provider.
HR and managers should notify IT as soon as a hire is confirmed, ideally a week or more in advance. A short request form helps. It should include:
Name, job title, department and start date.
Supervisor or manager name.
Work location or units.
Systems needed, such as EMR, scheduling, email and timekeeping.
Whether the person is an employee, agency staff, contractor or student.
A role template to copy, such as a day-shift CNA or a medical records clerk.
Use roles to define access. Starting from a standard role keeps access consistent and avoids copying a coworker's permissions, which may include more than the new hire needs.
Create the user account with a unique username.
Assign a temporary password to be changed at first login, delivered securely and never by an open email.
Set up multi-factor authentication, or schedule it for the first day.
Create the email account and add the person to the right distribution lists.
Grant access to systems according to the role, using the minimum access needed.
Prepare a device if one is assigned, including encryption, endpoint protection and updates.
Assign a badge or door access in coordination with your facilities team.
Add a phone extension or mobile device if needed.
The HIPAA Security Rule expects access to ePHI to be authorized and appropriate to the role, so documenting who approved each person's access is worthwhile.
Plan a short, practical IT orientation, ideally fifteen to thirty minutes with a live person. Cover:
Logging in and setting a password. Explain the password rules and show how to use the approved password manager or sign-in method.
MFA setup and what to do if the phone is lost.
How to get help. Provide the helpdesk phone number, email and the hours of support. Put it on a card they can keep.
Security basics. Phishing red flags, locking screens, not sharing credentials and reporting problems quickly.
Acceptable use. Explain rules for personal devices, social media, texting about residents and installing software.
Privacy reminders. Access only the information needed for your job. Inappropriate access is logged.
Have the new hire sign an acknowledgment of the policies, and keep it on file.
Temporary staff often cover urgent needs, and they are the group most likely to be given a shared login. Prepare a plan:
Create named, time-limited accounts with limited access.
Deliver a brief, standardized orientation.
Disable accounts automatically at the end of the assignment.
Check in with the new hire to find access gaps or confusion.
Verify that required training in HIPAA and security awareness is completed and logged.
Confirm that the manager reviewed and approved the access.
Close the onboarding ticket and record completion.
Track how many new hires are fully functional on day one, how many access fixes are needed in the first week and how long it takes to complete onboarding after notification. Patterns point to process improvements, such as earlier notice from HR.
Good onboarding goes hand in hand with good offboarding. The same role templates and records make it easier to remove access when someone leaves. We will cover that in a future article.
UnityCare IT manages user accounts, devices and training for healthcare and senior living organizations, and can help you build a repeatable onboarding checklist your HR and department leaders can follow.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: 2524 N Broadway Ste 554 PMB 947974, Edmond, Oklahoma 73034