A new hire's first shift sets the tone. If a nurse spends the first two hours waiting for a login, or an aide is handed a shared password because nothing else is ready, the organization starts the relationship with frustration and risk. In long-term care, where turnover and agency staffing mean new faces arrive often, a repeatable IT onboarding process pays off every month.
This checklist is built for administrators, HR and business office managers, with notes on where your IT provider fits.
The most important step is the request. IT cannot create accounts it does not know about. Use a simple onboarding form that HR or the supervisor completes as soon as an offer is accepted.
Location or facility, if you operate more than one.
Role-based access needed, such as EMR role, billing, scheduling or email. Name a template, such as the same access as another staff member in that role, not a specific person.
Equipment needed, such as a laptop, badge, phone or tablet.
Whether they need remote access or a mobile device, which should be an exception, not default.
Give IT at least three to five business days of notice when possible. Same-day requests will happen, but they should be the exception.
IT should create:
A unique user account for the employee. Never share logins, because shared credentials make audit trails meaningless and HIPAA requires unique user identification.
An email account, if the role needs one.
EMR and other clinical applications with the correct role. Apply the minimum necessary standard: staff should see only what their job requires.
Multi-factor authentication enrolled during the first day, with a supervisor or IT present to help.
Access to shared folders limited to their department.
Phone extension, voicemail or nurse call badge assignments if applicable.
Ask the supervisor to verify in writing that the access list is correct. Over-provisioning is common and hard to spot later.
Prepare the laptop, workstation or tablet ahead of time, with software installed, encryption on and updates applied.
Label and log the device in your asset inventory, with the assigned user and date.
Provide a quick-reference sheet for connecting to Wi-Fi, printing, and reporting problems.
For staff who use personal phones for work, explain your mobile device policy before enrolling anything.
The new employee needs about thirty minutes of focused IT orientation, which can be combined with HIPAA training. Cover:
How to log in, change the initial password and set up MFA.
Password habits: long passphrases, no sharing, no sticky notes at the nurses' station.
Locking or logging out when stepping away, which matters in shared care areas.
How to spot and report phishing.
Acceptable use: no personal storage devices, no unapproved apps, no texting resident information through personal messaging apps.
How and when to call the helpdesk, and what information to have ready.
Where to find policies and who to ask about privacy questions.
Have the employee sign the acceptable use policy and confidentiality acknowledgment. Keep the signed copy in the personnel file.
The HIPAA Security Rule expects security awareness and training for all workforce members, and the Privacy Rule requires privacy training. Record the date, topics and trainer. Your auditors, insurers and surveyors may ask to see them.
Contract workers still need access to do their jobs. Avoid generic or shared accounts. Create named, time-limited accounts, provide the same orientation in condensed form, and set the account to expire when the assignment ends. Confirm in the staffing agency contract how the agency handles confidentiality and training.
Ask the new hire whether anything was missing or confusing.
Check that the access matches what the role needs.
Review the ticket history for anything that suggests a training gap.
Put the checklist in a shared place, test it with a real hire, and revise. UnityCare IT can build an onboarding and offboarding workflow with your HR team so that new employees are ready on day one and former employees lose access the day they leave.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: 2524 N Broadway Ste 554 PMB 947974, Edmond, Oklahoma 73034