A new nurse arrives for her first shift, and there is no login for the charting system, no badge access, and nobody sure who is supposed to fix it. She spends the morning shadowing someone else while a manager hunts for an administrator. This is common, and it is entirely preventable.
A good IT onboarding process does two jobs. It gets people productive quickly, and it makes sure they receive exactly the access their role requires, no more and no less. Here is a checklist that HR, department heads and IT can share.
Give IT at least several business days of notice when possible. The request should include:
Full legal name and preferred name
Job title and department
Supervisor's name
Start date and shift or schedule
Which facility or facilities they will work in
Whether they are a full-time employee, agency staff, contractor or student
A short standard form, rather than an email thread, avoids missing details.
Work with department heads to create role templates. A CNA, an RN, a medical records clerk and a business office employee each need a different set of systems and permissions. Templates speed up setup and reduce the chance of over-granting access. HIPAA's minimum necessary standard and the Security Rule's access control requirements both point toward giving people only the access their role requires.
Assign a laptop or confirm the shared workstations they will use
Prepare a phone or extension, if applicable
Order and label any badges, key fobs or tokens
Confirm that devices are encrypted, updated and enrolled in your management system
On or before day one, IT should have set up:
A unique user account. Never share logins or reuse a departed employee's account.
Email and calendar, where appropriate
Access to the EMR/EHR with the correct role and permissions
Multi-factor authentication enrollment, with time set aside for it
Access to scheduling, timekeeping and payroll tools
Door and badge access
Printer, eFax or scanner access that the role requires
Agency and contract staff deserve particular care. Give them accounts with limited scope and an automatic end date, so access does not linger after their assignment.
Set aside 30 to 45 minutes of the first shift, with someone who can answer questions.
Log in together. Have the new hire sign in, set a password, and complete MFA while someone is present. Avoid email-only instructions.
Show where help is. Provide the helpdesk phone number, email and hours on a card or badge sticker.
Cover the basics of safe use. Do not share passwords, lock the screen when you walk away, and never leave residents' information visible.
Teach phishing basics. Explain how to spot and report suspicious messages, with the same no-blame message you give existing staff.
Explain acceptable use. Cover personal devices, texting residents' information, social media and photos.
Walk through downtime procedures. New nurses should know where paper forms are kept if systems go down.
HIPAA requires workforce training on privacy and security policies. Document that new hires complete training soon after joining, and collect signed acknowledgments for policies such as acceptable use and confidentiality. Keep the records with HR files.
Follow up on day three or four to catch problems early
Confirm that no unneeded access was granted, and no needed access is missing
Make sure the new hire knows how to reset a password and where to find quick guides
Collect feedback on what was confusing
Access requests sent the afternoon before the start date
Copying permissions from another employee, which carries over access they should not have
Letting new staff share a coworker's login because theirs is not ready
Forgetting to enroll in MFA until the first lockout
No process for transfers between units, leading to access creep as people change roles
Whatever you build for onboarding should have a mirror image for departures. Access granted must be removed when someone leaves, and role changes should trigger a review of what the person no longer needs.
UnityCare IT can help care organizations build onboarding templates, standard request forms and a repeatable setup process so new hires start smoothly and securely. If new staff regularly wait on access, let us know and we can look at where the process slips.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: UnityCare Technologies, 2524 N Broadway Ste 554, PMB 947974, Edmond, Oklahoma 73034-4172