Alberta Health Services: Provincial Reportable Incident Response Process (PRIRP) (v1.1, October 2018)

Summary

To ensure consistency and effectiveness of responses to health information under threat, Alberta Health has instituted the Provincial Reportable Incident Response Process (PRIRP) for all health stakeholders managing or accessing Alberta’s provincial Electronic Health Record (EHR), including its subsystems and repositories.

This process covers incidents of data confidentiality, data integrity, and data availability and is divided into five phases. PRIRP is applicable to all health stakeholders managing, accessing, or regulating Alberta’s EHR, including its subsystems and repositories. •

Health stakeholders use PRIRP to report a suspected or known security incident to Alberta Health. Alberta Health will assess the threat from the incident, and if valid will assemble an Incident Response Team (IRT). The IRT will be led by the Alberta Health Security team and include the reporting health stakeholder(s) and other applicable resources for any particular incident. The IRT will communicate as needed with other stakeholders impacted by the incident.