Laserfiche WebLink
In addition to the built-in technical safeguards, SAHA will follow the following technical <br />security requirement: <br /> <br /> <br />SAHA staff will not save EIV data to a computer hard drive or any other automated <br />information system (i.e., network drive, disk or CD) <br /> <br />SAHA staff will not leave their computer unattended with EIV data displayed on the <br />screen <br /> <br /> <br /> <br />Administrative Safeguards <br /> <br />The SAHA EIV Security Officer(s) will maintain security-related records and monitor <br />programmatic security issues. The EIV Security Officer(s) will adhere to the following <br />administrative safeguards: <br /> <br /> <br />Ensure that all users who have access to EIV data have an Access Authorization/Rules of <br />Behavior/User Agreement form on file signed by the user and the Security Officer on her <br />designee on file; <br /> <br />Conduct quarterly reviews of all User IDs to determine if the user still has a valid need to <br />access the EIV data; and <br /> <br />Ensure the access rights are modified or revoked as appropriate. <br /> <br />The EIV Security Officer(s) will maintain the following EIV security records and forms: <br /> <br /> <br />EIV Rules of Behavior and User Agreement forms <br />EIV Access Authorization Forms <br /> <br />EIV Security violation information <br /> <br />EIV Security Awareness Training Records <br /> <br />Records of internal audits to ensure that the Form HUD-9886 has been signed by each <br />adult member of the household and is kept in the Confidential Resident File <br /> <br />A record of all users who have approved access to EIV data including the date the access <br />was granted and the date access was terminated. <br /> <br />Physical Safeguards <br /> <br />The purpose of physical safeguards is to provide barriers between unauthorized persons and <br />documents containing private data. <br /> <br />Access to Work Space <br /> <br />The doors to the SAHA work area are locked at all times. To enter into the workspace, you must <br />access a coded door lock. Employees are only granted access to a workspace that is appropriate <br />based on their employment assignment. Hours of access to the workspace are also controlled. In <br />general, staff is allowed access to the workspace Monday-Friday, from 7:00 a.m. to 6:00 p.m. <br />Management approval is required for weekend or after hours work. <br /> <br />5 <br />Exhibit 2 <br /> <br /> <br />