Laserfiche WebLink
manual and one copy will be retained in the User Agreement section of the EIV file. The <br />farms will be updated once a year at the refresher training. <br />• Examples of potential Privacy Act and security violations will be provided during the <br />training. <br />Technical Safeguards <br />The purpose of these technical safeguards is as follows: <br />• To reduce the risk of a security violation related to the EIV system's software, network or <br />applications <br />• To identify and authenticate all users seeking access to the EIV system <br />• To deter and detect attempts to access the system without authorization <br />• To monitor the user activity of the ETV system. <br />Various technical safeguards have been built into the EN system to mitigate the risk of security <br />violations. However, SAHA will ensure that the physical and administrative safeguards are also <br />in place to complement these technical safeguards in order to meet HUD's standard for the <br />protection of private data. <br />description of Built In Technical Safeguards <br />The following describes the technical controls built into the EIV system: <br />• Each user is required to have their own User ID and Password <br />• The User ID identifies the PHA and tenant information that the user is authorized to <br />access <br />• User IDs are confidential and maintained by the Security Officer <br />• The system forces all users to change their password periodically and limit the reuse of <br />previous passwords <br />• After three unsuccessful attempts to login, the User ID is locked and the user must <br />contact the HUD System Administrator to have the password reset <br />• Online warning messages that inform the user of the civil and criminal penalties <br />associated with unauthorized use of the EIV system will be displayed. <br />The following describes additional SAHA Technical Safeguards: <br />• Each user is requited to have their own User ID and Password <br />• The individual User ID is attached to specific access rights <br />• System {network} users are granted limited access rights and given a password to access <br />the Network system <br />• Warning messages when users log in inform the user of City of Santa Ana policy <br />governing the use of City systems. <br />4 <br />Exhibit 2 <br />