03 - HA ANNLPLAN - Laserfiche WebLink

Home Browse Search

• Ensures compliance with SARA security policies and procedures outlined in this document • Communicates security information and requirements to appropriate personnel, including coordinating and conducting annual security awareness training sessions Ensures that any infractions of security procedures are promptly reported to the Housing & Neighborhood Development Manager or her designee for investigation and enforcement • Ensures that all EIV retards and forms (i.e., signed user agreements} are kept and updated as needed. Other Quality Cantr©1 Reviews Lead Staff Persons routinely conduct audits on completed transactions. As part of any file audit, they will check for a current HUD-9886 The Supervisors} will conduct an annual review of tenant files to ensure that HUD-9886 forms are in tenant files. Files will be randomly selected. Sample size will be the same as sample size outlined in SEMAP regulations for indicator #3 --Adjusted Income. Security Awareness Training Security Awareness Training is a crucial aspect of ensuring the security of the EIV system and data. EIV users and potential users will be made aware of the importance of respecting the privacy of data, following established procedures to maintain privacy and security, and notifying management in the event of a security of privacy violation. In addition to annual Security Awareness Training, the Security Officer{s) will communicate security information and requirements to appropriate personnel using various methods such as: • E-mail reminders • Discussions at group and managerial meetings • Security bulletins posted throughout the work areas Security Awareness Training will be provided to each employee upon granting access to the EIV system. Thereafter, annual security awareness refresher training will be provided to each employee with EIV access. Annual Security Awareness Training will be conducted through HUD Webcasts ar by the Security Officer. • The trainer and the employee will both sign a certif cation that EIV security training has been provided. The training certif cation and a record of the training material provided at the awareness training will be kept in the Security Awareness Training section of the EIV fle. • A# the end of the training, each employee will also sign the EIV Rules of Behavior and User Agreement form. One copy will be given to the employee to be placed in their desk 3 Exhibit 2