In order to mitigate the possibility of identity theft within the Service Department, the following security procedures, along with other appropriate measures as determined by the supervisor and senior management, shall be implemented:
(a) Paper documents, files, and electronic media containing customer identifying information will be secured either in a locked cabinet or on a medium secured by a password except when staff is working on the covered account.
(b) Staff will not leave personally identifiable information or other sensitive papers in a location that is accessible to the public.
(c) Staff will not disclose passwords to any computers or other devices that contain information on covered accounts.
(d) Anti-virus and anti-spyware programs will be run on individual computers and on servers.
(e) Staff who violate security policy are subject to discipline and possible dismissal.
(Ord. 2009-20. Passed 5-19-09.)