Ex. 2 HA ANNLPLAN, EIV - Laserfiche WebLink

Home Browse Search

User Agreement manual and one copy will be retained in the section of the EIV file. The forms will be updated once a year at the refresher training. Examples of potential Privacy Act and security violations will be provided during the training. Technical Safeguards The purpose of these technical safeguards is as follows: applications To identify and authenticate all users seeking access to the EIV system To deter and detect attempts to access the system without authorization To monitor the user activity of the EIV system. Various technical safeguards have been built into the EIV system to mitigate the risk of security violations. However, SAHA will ensure that the physical and administrative safeguards are also in pl protection of private data. Description of Built-In Technical Safeguards The following describes the technical controls built into the EIV system: Each user is required to have their own User ID and Password The User ID identifies the PHA and tenant information that the user is authorized to access User IDs are confidential and maintained by the Security Officer The system forces all users to change their password periodically and limit the reuse of previous passwords After three unsuccessful attempts to log in, the User ID is locked and the user must contact the HUD System Administrator to have the password reset Online warning messages that inform the user of the civil and criminal penalties associated with unauthorized use of the EIV system will be displayed. The following describes additional SAHA Technical Safeguards: Each user is required to have their own User ID and Password The individual User ID is attached to specific access rights System (network) users are granted limited access rights and given a password to access the Network system Warning messages when users log in inform the user of City of Santa Ana policy governing the use of City systems. 4 Exhibit 2