Written Information Security Program (Wisp) For Protection Of Personal Information Template Page 7
ADVERTISEMENT
1
2
3
4
5
6
7
8
9
10
11a. Secure user authentication protocols including:
i.
control of user IDs and other identifiers;
ii.
a reasonably secure method of assigning and selecting
passwords, or use of unique identifier technologies,
such as biometrics or token devices;
iii.
control of data security passwords to ensure that such
passwords are kept in a location and/or format that does
not compromise the security of the data they protect;
iv.
restricting access to active users and active user
accounts only; and
v.
blocking access to user identification after multiple
unsuccessful attempts to gain access or the limitation
placed on access for the particular system;
b. Secure access control measures that:
i.
restrict access to records and files containing Personal
Information to those who need such information to
perform their job duties; and
ii.
assign unique identifications plus passwords, which are
not vendor supplied default passwords, to each person
with computer access, that are reasonably designed to
maintain the integrity of the security of the access
controls.
c. Encryption of all transmitted records and files containing
Personal Information that will travel across public networks,
and encryption of all data containing Personal Information to
be transmitted wirelessly.
d. Reasonable monitoring of systems, for unauthorized use of or
access to Personal Information;
e. Encryption of all Personal Information stored on laptops or
other portable devices;
f. For files containing Personal Information on a system that is
connected to the Internet, there must be reasonably up-to-date
firewall protection and operating system security patches,
reasonably designed to maintain the integrity of the Personal
Information.
g. Reasonably up-to-date versions of system security agent
software installed and active at all times, which must include
7
ADVERTISEMENT
0 votes
Related Articles
Related forms
Related Categories
Parent category: Life