Full Text
Policy Title: City Information Access Policy ID: IT-11 Origination Date: January 27, 2015 Update Date: January 27, 2015 IT11-1 Policy It is the policy of Ogden City IT to protect City data and information from unauthorized access, viewing, or use. IT11-2 Policy Purpose This policy establishes a standard for preventing unauthorized access to City data and information including the proper use of screen savers, locking computers, and securing authorized permissions to City data and information. IT11-3 Evidence of Compliance No unauthorized access to City data and information will ocurr. IT11-4 Policy Procedures 1. This policy is in addition to City Policy 1430 “SOFTWARE AND ELECTRONIC DATA”. 2. Only approved City employees and vendors will be given security rights to access Ogden City’s network and data. 3. Assigned user department managers/supervisors will control and manage user computer security and will determine City employees and vendors allowed to access City data and information. 4. The I.T. Department will control security access of employees and vendors to the Ogden City network through Active Directory, physical connections, and other tools. 5. Employees and vendors with rights to Ogden City’s data and information are responsible to assure that only approved persons view or use such data and may not grant access rights to any other person without approval of their manager/supervisor and I.T. 6. Employees and vendors with security rights to Ogden City’s data and information are not to leave screens and/or reports containing City data and information visible to unauthorized persons. 7. Upon leaving their work area at any time employees and vendors with security rights to Ogden City’s data and information are required to secure and to lock their computer to prevent access to such data. a. Computer Screen Locking Instructions - When leaving their computer work station, for any length of time, employees and vendors should lock their computer using the following instructions. ---PAGE BREAK--- i. Press the “start” key and the key at the same time to hide the current working screen and display a Computer Locked Window ii. Press the “Ctrl”, “Alt”, and “Delete” keys at the same time to resume access to the computer iii. Enter your password and resume working. 8. Should employees and vendors with security rights to Ogden City’s data and information discover or suspect unauthorized access to Ogden City’s data, in any format, they should report this immediately to their supervisor/manager and Ogden City IT. 9. Any employee found to have violated this policy may be subject to disciplinary action up to and including termination. Any vendor found to have violated this policy may be subject to criminal action up to and including termination of any Ogden City’s contracts.