(A) Purpose. This plan is intended to identify red flags that will alert employees when new or existing accounts are opened using false information, protect against the establishment of false accounts, methods to ensure existing accounts were not opened using false information, and measures to respond to such events.
(B) Responsibility. The senior management person responsible for this plan is the Utilities Director.
(C) Governing body. The governing body members of the utility are the Board of Public Works and Safety.
(D) Risk assessment. The city utilities has conducted an internal risk assessment to evaluate how at risk the current procedures are at allowing customers to create a fraudulent account and evaluate if current (existing) accounts are being manipulated. This risk assessment evaluated how new accounts were opened and the methods used to access the account information. Using this information the utility was able to identify red flags that were appropriate to prevent identity theft:
(1) New accounts opened in person.
(2) New accounts opened via telephone.
(3) New accounts opened via fax.
(4) New accounts opened via web.
(5) Account information accessed in person.
(6) Account information accessed via telephone (person).
(7) Account information is accessed via telephone (automated).
(8) Account information is accessed via web site.
(9) Identity theft occurred in the past from someone falsely opening a utility account.
(Ord. 8-2009, passed 4-14-09)