Laserfiche WebLink
77 <br /> <br />Unattended computers shall be secured from viewing by password protected screen savers, <br />which should be set to automatically activate after a period of non-use. The period of non-use <br />shall be for no more than 60 minutes. <br />Desktop computer users shall store confidential and sensitive information on a network drive <br />(shared directory on the City network) and not the user’s hard drive. <br />Computers and monitors shall be turned off at the end of each workday unless you are instructed <br />otherwise. <br />Additional security requirements may be required for computers containing data governed by other <br />applicable state and federal laws, including law enforcement data and data associated with the Health <br />Insurance Portability and Accountability Act (HIPAA). <br />C. Physical Security Measures <br />Physical security measures shall be used to secure notebooks, computer media, and other forms of <br />information storage media containing confidential or sensitive information. <br />Mobile notebook computers actively connected to the network or information systems must not be left <br />unattended. <br />Notebook computers left in a vehicle shall not be visible except in police, utility department, or fire <br />emergency vehicles where the device is mounted to the vehicle console. If possible, the notebook should <br />be stored in a locked trunk. Weather conditions should be considered when leaving electronic equipment <br />in a vehicle for long periods of time. Unattended vehicles shall be locked at all times. <br />Mobile notebook computers, computer media, and any other forms of removable storage should be <br />stored in a secure location. <br />Other information storage media containing confidential data shall be stored in a secure location or locked <br />cabinet when not in use. <br />D. Peripheral Equipment <br />Peripheral equipment (e.g. printers, faxes, copiers) that store, produce, and transfer confidential or <br />sensitive information, shall be protected from inadvertent or unauthorized access. <br />Documents containing confidential or sensitive information should be cleared from printers and copiers <br />immediately. <br /> <br />E. Passwords <br />User identification (name) and authentication (password) shall be required to access the operating system <br />of all desktop and notebook computers. <br />Employees may not share account or password information with another person. Internet accounts are <br />to be used only by the assigned use of the account for authorized purposes. Attempting to obtain another <br />user’s password is strictly prohibited. Users are required to change or obtain a new password if they have <br />reason to believe that any unauthorized person has obtained their password. Users are required to take <br />all necessary precautions to prevent unauthorized access to Internet services. <br />Supervisors are required to report immediately to IT staff when an employee resigns or is terminated. <br />Employees are required to contact IT staff when they suspect their login ID has been compromised or <br />when someone else has obtained their password. <br />119