Laserfiche WebLink
Protect customer identifvinq information <br />In order to further prevent the likelihood of Identity Theft occurring with respect <br />to Utility accounts, the Utility will take the following steps with respect to its internal <br />operating procedures to protect customer identifying information: <br />1. Ensure that its website is secure or provide clear notice that the website is not <br />secure; <br />2. Ensure complete and secure destruction of paper documents and computer <br />files containing customer information; <br />3. Ensure that office computers are password protected and that computer <br />screens lock after a set period of time; <br />4. Keep offices clear of papers containing customer information; <br />5. Ensure computer virus protection is up to date; and <br />6. Require and keep only the kinds of customer information that are necessary <br />for utility purposes. <br />VI. <br />PROGRAM UPDATES <br />The Program Administrator will periodically review and update this Program to <br />reflect changes in risks to customers and the soundness of the Utility from Identity <br />Theft. In doing so, the Program Administrator will consider the Utility's experiences <br />with Identity Theft situations, changes in Identity Theft methods, changes in Identity <br />Theft detection and prevention methods, and changes in the Utility's business <br />arrangements with other entities. After considering_ these factors, the Program <br />Administrator will determine whether changes to the Program, including the listing of <br />Red Flags, are warranted. If warranted, the Program Administrator will update the <br />Program or present the City Council with his or her recommended changes and the <br />City Council will make a determination of whether to accept, modify or reject those <br />changes to the Program. <br />VII. <br />PROGRAM ADMINISTRATION. <br />A. Oversiqht <br />Responsibility for developing, implementing and updating this Program lies <br />with an Identity Theft Committee for the Utility. The Committee is headed by a <br />Program Administrator. Two or more other individuals appointed by the Program <br />Administrator comprise the remainder of the committee membership. The Program <br />Administrator will be responsible for the Program administration, for ensuring <br />appropriate training of Utility staff on the Program, for reviewing any staff reports <br />regarding the detection of Red Flags and the steps for preventing and mitigating <br />