US Dept of Homeland Security FEMA 8/28/2020

FOR OFFICIAL USE ONLY//CONTROLLED UNCLASSIFIED INFORMATION • Passwords must be promptly changed whenever a compromise of a password is known or suspected. 2.4 Integrity Controls&Data Protection • All computer workstations accessing IPAWS-OPEN must be protected by up-to-date anti-virus software. Virus scans must be performed on a periodic basis and when notified by the anti-virus software. • Users accessing interoperable system(s)to utilize IPAWS-OPEN must: o Physically protect computing devices such as laptops,PEDs,blackberry devices,smartphones,etc; o Protect sensitive data sent to or received from IPAWS-OPEN; o Not use peer-to-peer(P2P)file sharing,which can provide a mechanism for the spreading of viruses and put sensitive information at risk; o Not program computing devices with automatic sign-on sequences,passwords or access credentials when utilizing IPAWS-OPEN. Users may not provide personal or official IPAWS-OPEN information solicited by e-mail. If e-mail messages are received from any source requesting personal information or asking to verify accounts or other authentication credentials,immediately report this and provide the questionable e-mail to the Local System Administrator and/or the City of Everett Help Desk. • Only devices officially issued through or approved by DHS,FEMA and/or approved emergency management organizations are authorized for use to interoperate with IPAWS-OPEN and use of personal devices to access and/or store IPAWS-OPEN data and information is prohibited. • If a Blackberry,smartphone or other PED is used to access the interoperable system(s)to utilize IPAWS- OPEN,the device must be password protected and configured to timeout or lock after 10 minutes of inactivity. • If sensitive information is processed,stored,or transmitted on wireless devices,it must be encrypted using approved encryption methods. 2.5 System Access Agreement • I understand that I am given access to the interoperable system(s)and IPAWS-OPEN to perform my official duties. • I will not attempt to access data,information or applications I am not authorized to access nor bypass access control measures. • I will not provide or knowingly allow other individuals to use my account credentials to access the interoperable system(s)and IPAWS-OPEN. • To prevent and deter others from gaining unauthorized access to sensitive resources,I will log off or lock my computer workstation or will use a password-protected screensaver whenever I step away from my work area,even for a short time and I will log off when I leave for the day. • To prevent others from obtaining my password via"shoulder surfing",I will shield my keyboard from view as I enter my password. • I will not engage in,encourage,or conceal any hacking or cracking,denial of service,unauthorized tampering,or unauthorized attempted use of(or deliberate disruption of)any data or component within the interoperable system(s)and IPAWS-OPEN. • I agree to inform my Local System Administrator when access to the interoperable system(s)and/or 12 V4.2,June 20,2019