(A) Oversight. The utility’s program will be overseen by a Program Administrator. The Program Administrator shall be the City Clerk, or in the absence of the City Clerk, some other designated employee of the city as designated by the Board of Aldermen. The Program Administrator will be responsible for the program’s administration, for ensuring appropriate training of utility staff on the program, for reviewing any staff reports regarding the detection of red flags, and the steps for preventing and mitigating identity theft, determining which steps of prevention and mitigation should be taken in particular circumstances, reviewing and, if necessary, approving changes to the program.
(B) Staff training and reports. Utility staff responsible for implementing the program shall be trained either by or under the direction of the Program Administrator in the detection of red flags, and the responsive steps to be taken when a red flag is detected. Such training will be sufficient to effectively implement the program.
(C) Service provider arrangements. The utility will take the following steps to ensure the service provider performs its activity in accordance with reasonable policies and procedures designed to detect, prevent, and mitigate the risk of identity theft. These steps may include:
(1) Requiring, by contract, that service providers have such policies and procedures in place; and
(2) Requiring, by contract, that service providers review the utility’s program and report any red flags to the Program Administrator.
(Ord. passed - -)