Ex. 2 HA ANNLPLAN, EIV - Laserfiche WebLink

Home Browse Search

Ensures compliance with SAHA security policies and procedures outlined in this document Communicates security information and requirements to appropriate personnel, including coordinating and conducting annual security awareness training sessions Ensures that any infractions of security procedures are promptly reported to the Housing & Neighborhood Development Manager or her designee for investigation and enforcement Ensures that all EIV records and forms (i.e., signed user agreements) are kept and updated as needed. Other Quality Control Reviews Lead Staff Persons routinely conduct audits on completed transactions. As part of any file audit, they will check for a current HUD-9886 The Supervisor(s) will conduct an annual review of tenant files to ensure that HUD-9886 forms are in tenant files. Files will be randomly selected. Sample size will be the same as sample size outlined in SEMAP regulations for indicator #3 Adjusted Income. Security Awareness Training Security Awareness Training is a crucial aspect of ensuring the security of the EIV system and data. EIV users and potential users will be made aware of the importance of respecting the privacy of data, following established procedures to maintain privacy and security, and notifying management in the event of a security of privacy violation. In addition to annual Security Awareness Training, the Security Officer(s) will communicate security information and requirements to appropriate personnel using various methods such as: E-mail reminders Discussions at group and managerial meetings Security bulletins posted throughout the work areas Security Awareness Training will be provided to each employee upon granting access to the EIV system. Thereafter, annual security awareness refresher training will be provided to each employee with EIV access. Annual Security Awareness Training will be conducted through HUD Webcasts or by the Security Officer. The trainer and the employee will both sign a certification that EIV security training has been provided. The training certification and a record of the training material provided at Security Awareness Training the awareness training will be kept in the section of the EIV file. At the end of the training, each employee will also sign the EIV Rules of Behavior and User Agreement form. One copy will be given to the employee to be placed in their desk 3 Exhibit 2