Laserfiche WebLink
• <br /> 5. Password management <br /> a. Passwords are not to be shared or posted near workstations. <br /> b. Password-activated screen savers will be used to lock employee computers in the <br /> Utility Services after a period of inactivity. <br /> 6. Paper Records <br /> a. Paper records that contain personal information will be shredded before being <br /> placed in the recycling bin. <br /> b. Paper shredders will be available in the Utility Service office and mailroom. <br /> VI. PROGRAM UPDATES <br /> The Public Works Director will periodically review and update this Program to reflect <br /> changes in risks to customers and the soundness of the Utility from Identity Theft. In doing so, <br /> the Public Works Director will consider the Utility's experiences with Identity Theft, changes in <br /> Identity Theft methods,changes in Identity Theft detection and prevention methods, and changes <br /> in the Utility's business arrangements with other entities and service providers. After <br /> considering these factors, the Public Works Director will determine whether changes to the <br /> Program, including the listing of Red Flags, are warranted. If warranted, the Public Works <br /> Director will update the Program or present the Everett City Council with his or her <br /> recommended changes, and the Everett City Council will make a determination of whether to <br /> accept, modify or reject those changes to the Program. <br /> VII. PROGRAM ADMINISTRATION <br /> A. Oversight <br /> Responsibility for developing, implementing and updating this Program lies with an <br /> Identity Theft Committee for the Utility. The Committee is headed by the Public Works <br /> Director. Two other individuals, one of which will be the Utility Services Supervisor, will be <br /> appointed by the Public Works Director and will comprise the remainder of the committee <br /> membership. The Public Works Director will be responsible for the Program administration, for <br /> ensuring appropriate training of Utility staff on the Program, for reviewing any staff reports <br /> regarding the detection of Red Flags and the steps for preventing and mitigating Identity Theft, <br /> determining which steps of prevention and mitigation should be taken in particular <br /> circumstances, and considering periodic changes to the Program. <br /> B. Staff Training.and Reports <br /> Utility staff responsible for implementing the Program shall be trained either by or under <br /> the direction of the Public Works Director in the detection of Red Flags, and the responsive steps <br /> to be taken when a Red Flag is detected. As directed by the Public Works Director, Utility staff <br /> should also provide an annual report to the Public Works Director. This report should include <br /> incidents of Identity Theft during the past year,the Utility's compliance with the Program, the <br /> 7 18 <br />