If you keep electronic records, you must develop policies and procedures in addition to the requirements in §748.343 of this title (relating to What policies and procedures must I have for protecting records?). These policies and procedures must address:(1) What records must be in the external paper file and what records can be stored in the electronic file;(2) Computer security systems, including confidentiality, passwords, and employee procedures to ensure the security of the system;(3) Requirements for routine back-up of data;(4) Anti-virus protection systems; and(5) Limit access to your electronic files to persons within your operation authorized to see specific information in an electronic file.