05/07/2012 Council Packet - Laserfiche WebLink

Home Search

E. Violations of This Policy Violations of this policy will be treated like other offenses in accordance with the City's personnel policy. F. Securing Desktop and Notebook Computers 1. When leaving a desktop or notebook computer unattended, users shall apply the "Lock Workstation" feature (ctrl /alt /delete) where systems allow. 2. Unattended computers shall be secured from viewing by password protected screen savers, which should be set to automatically activate after a period of non -use. The period of non -use shall be for no more than 30 minutes. 3. Desktop computer users shall store confidential and sensitive information on a network drive (shared directory on the City network) and not the user's hard drive. 4. Computers and monitors shall be turned off at the end of each workday unless you are instructed otherwise. 5. Users shall not disable or alter security safeguards installed on computers, such as virus detection software. 6. Additional security requirements may be required for computers containing data governed by other applicable state and federal laws, including law enforcement data and data associated with the Health Insurance Portability and Accountability Act (HIPAA). G. Physical Security Measures Physical security measures shall be used to secure notebooks, computer media, and other forms of information storage media containing confidential or sensitive information. 1. Mobile notebook computers actively connected to the network or information systems must not be left unattended. Notebook computers left in a vehicle shall not be visible except in police, utility department, or fire emergency vehicles where the device is mounted to the vehicle console. If possible, the notebook should be stored in a locked trunk. Weather conditions should be considered when leaving electronic equipment in a vehicle for long periods of time. Unattended vehicles shall be locked at all times. 3. Mobile notebook computers, computer media, and any other forms of removable storage (e.g. diskettes, CD ROMs, zip disks, flash drives) should be stored in a secure location with a locking cable or stored in a locked cabinet when not in use. 4. Other information storage media containing confidential data, such as paper, files, and tapes, shall be stored in a secure location or locked cabinet when not in use. H. Peripheral Equipment Peripheral equipment (e.g. printers, faxes, copiers) that store, produce, and transfer confidential or sensitive information, shall be protected from inadvertent or unauthorized access. All documents containing confidential or sensitive information shall be cleared from printers and copiers immediately. 49