(A) The Program shall be updated periodically to reflect changes in risks to customers or to the safety and soundness of the organization from identity theft, based on factors such as:
(1) The experiences of the organization with identity theft.
(2) Changes in methods of identity theft.
(3) Changes in methods to detect, prevent and mitigate identity theft.
(4) Changes in the type of accounts that the organization offers or maintains.
(5) Changes in the business arrangement of the organization, including mergers, acquisitions, alliances, joint ventures and service provider arrangements.
(B) The City Finance Director shall oversee an annual review of this policy and, when necessary, recommend revisions to address changes in risks to its customers, based upon such factors such as:
(1) Experiences with identity theft.
(2) Changes in methods of identity theft.
(3) Changes in methods to detect and prevent identity theft.
(4) Changes in the types of accounts that the city offers.
(5) Changes in organizational structure.
(Res. 09-005, passed 7-14-09)