§ 40.30 OVERSIGHT OF THE PROGRAM.

   (A)   Oversight of the Program shall include:

      (1)   Assignment of specific responsibility for implementation of the Program.

      (2)   Review of reports prepared by staff regarding compliance.

      (3)   Approval of material changes to the Program as necessary to address changing risks of identity theft.

   (B)   Reports shall be prepared as follows:

      (1)   Staff responsible for development, implementation and administration of the Program shall report to the City Finance Director at least annually on compliance by the organization with the Program.

      (2)   The report shall address material matters related to the Program, and evaluate issues such as:

         (a)   The effectiveness of the policies and procedures in addressing the risk of identity theft in connection with the opening of covered accounts, and with respect to existing covered accounts;

         (b)   Service provider agreements;

         (c)   Significant incidents involving identity theft and management's response; and

         (d)   Recommendations for material changes to the Program.

(Res. 09-005, passed 7-14-09)