Laserfiche WebLink
In addition to the built-in technical safeguards, SARA will follow the following technical <br />security requirement: <br />• SAHA staff will not save EN data to a computer hard drive or any ather automated <br />information system {i.e., network drive, disk or CD} <br />• SAHA staff will not leave their computer unattended with EIV data displayed on the <br />screen <br />• SAHA staff will not log in on another user's ID. <br />Administrative Safeguards <br />The SAHA EN Security Officer{s} will maintain security-related records and monitor <br />programmatic security issues. The EN Security Officers} will adhere to the following <br />administrative safeguards: <br />Ensure that aIl users who have access to EIV data have an Access Authorization/Rules of <br />Behaviar/LTser Agreement foam on f le signed by the user and the Security Officer on her <br />designee on file; <br />Conduct quarterly reviews of all User IDs to determine if the user still has a valid need to <br />access the EIV data; and <br />Ensure the access rights are modified or revoked as appropriate. <br />The EN Security Officers} will maintain the following EIV security records and forms: <br />• EIV Rules of Behavior and User Agreement forms <br />• EIV Access Authorizatian Forms <br />• EN Security violation information <br />* EIV Security Awareness Training Records <br />• Records of internal audits to ensure that the Form HUD-9855 has been signed by each <br />adult member of the household and is kept in the Confidential Resident File <br />• A record of all users who have approved access to EN data including the date the access <br />was granted and the date access was terminated. <br />Physical Safeguards <br />The purpose of physical safeguards is to provide barriers between unauthorized persons and <br />documents containing private data. <br />Access to Work Space <br />The doors to the SAHA work area are locked at all times. To enter into the workspace, you must <br />access a coded door lock. Employees are only granted access to a workspace that is appropriate <br />based on their employment assignment. Hours of access to the workspace are also controlled. In <br />general, staff is alIawed access to the workspace Monday-Friday, from 7:00 a.m. to 6:00 p.m. <br />Management approval is required far weekend or after hours work. <br />S <br />Exhibit 2 <br />