2022-077-E-IT Dept-PUBLIC LIBRARY ASSOCIATION, a divison of the American Library Association-Digital learning

Browse Search

DocuSign Envelope ID:24BBAFA9-CD81-4144-ACEF-E9036E703739 Information Technology Steering Committee, in conjunction with the Chief Information Security Officer, will assess the adequacy of the security awareness education and training program on a yearly basis. Termination Processes The following standards will be followed upon the resignation of an employee, member of Management, IT Staff contractor or third party user, or service provider. Employee Resignation • Human Resources will immediately notify IT when the resignation is received. • The Supervisor and/or Management Team will determine if access privileges will be continued for the notice period, adjusted or immediately terminated. IT will implement procedures as directed by the Supervisor. • A monthly report will be forwarded to the Chief Information Security Officer by Human Resources that lists all terminations during the month and confirmation that all building access and system access privileges have been terminated. Employee Termination • Human Resources will notify IT immediately upon termination of an employee. • IT will implement procedures as directed by the supervisor to immediately terminate all facility and system access rights. Management Resignation • Human Resources will immediately notify the Chief Information Security Officer when management resignation is received. • Administrative rights to the network will be immediately revoked. User rights will be maintained. • Any server passwords known by the management employee will be immediately changed. • Continued offsite access, as well as the usage of any portable equipment assigned (hardware, software and other materials), will be determined as agreed upon by the remaining executive management team. IT Staff Resignation or Termination • A determination must be made by management as to whether to allow the employee to work during the notice period or to have them leave immediately. • Each of the above procedures for management resignation must be followed. Third Parties (to include temporary workers and contractors) • All hardware, e.g. laptops, security fobs, network hot-spots, will be returned to Jende Solutions on the last day of the person's employment. • All network access will be revoked on the representative's last working day. • All residual vendor or partner management and reporting will be accomplished through the use of hard copy materials or through supervised access to limited information. • All customer information or other confidential Jende Solutions information will be returned to Jende Solutions upon termination of contract. 29. What methods does the cloud provider use to destroy information, when so authorized? Database record removal, log record removal, backup removal of the preceding list. 30. What is the cloud provider's patch management policy/methods? Patching occurs monthly, or earlier depending on security alerts and critical