We are working as a NOC and from time to time we do helpdesk roles since we are overnight shifters and we take over the queues outside of business hours. So our employers are a group of hospitals and you already know we take HIPAA to our heart very seriously lol. So we have some sort of process if someone calls regarding password reset, unblock on any of the systems such as EHR and other applications (basically that involves account management) we have to ask some security verifiers. The story was the guy that was fired he had a caller and turns out it was an auditor so the auditor purposely said all the answers incorrectly and for unknown reason the guy reset his password. So it actually didn't take that long the guy was fired within 2 weeks. In my case I made a huge mistake I misinterpreted our playbook. There was a recent change on our playbook before we are able to unblock accounts that were manually blocked for any reason, provided we ask some security verifiers. Well the new process is in case it is manually blocked we should just escalate and there should be some notes on the EHR why it was blocked and on the playbook all of the common reasons are noted there. Well I received a call that she received an account blocked error message upon checking the reason that was on the note it was strange it was the first time I received it I double checked our playbook the reason was not indicated there. Then I basically IF-ELSE our playbook for me all the conditions didnt match on the manually blocked part and the guys up top didn't delete the part where you can unblock the account. So I just asked the security questions which she passed and unblocked the account. So I posted it on our group then someone responded "We will escalate this internally. May need to do an audit." So I asked our team lead if what I did was right well he said it's not I should have escalated this then he indicated the part on the playbook which made no sense because on the playbook it just indicates if no notes are present escalate to this team. I escalated it but it was already too late and I already did the deed. Am I cooked? Have to admit it was really an honest mistake.   submitted by   /u/Illustrious-Mail6939 [link]   [comments]