Laserfiche WebLink
DocuSign Envelope ID: 885498D2-1CBA-4928-AE9B-EDEEE17D7376 <br />Payment Verification System (PVS) Match (electronic only); <br />Integrated Earning Clearance/Fraud Detection System (IFD) Match (electronic only); <br />Deceased Persons Match (DPM; paper only); and <br />Nationwide Prisoner Match (NPM; paper or electronic). <br />SSA Workforce: Refers to employees, contracted staff, volunteers, interns, trainees, and other <br />persons whose work is under the direct control and oversight of SSA. <br />Unauthorized Access: A user who gains logical or physical access without permission, a business <br />need or other lawful reason to a network, system, application, data, site or other resource. <br />IV. PROCEDURE <br />A. Detection: <br />1. OCSSA workforce members have the responsibility to monitor for and report any <br />known or suspected privacy or security incidents, breaches, intrusion or unauthorized <br />access, use, or disclosure of PII. Examples of incidents or breaches include, but are not <br />limited to: <br />a. Theft/Loss of PII or FTI. <br />b. E-mail, texting or faxing PII to an unknown or unauthorized recipient <br />c. Theft/Loss of unencrypted device (phones, laptops, thumb drives, etc.) <br />containing PII. <br />d. Employee accessing or searching data systems containing PII without a <br />legitimate business need. <br />e. Improper disposal of records containing PII, such as in a dumpster or recycle <br />bins <br />2. OCSSA staff shall immediately report privacy and security incidents by following the <br />process identified under Reporting and Resolution, with guidance from State and Federal <br />documents located in the Reference and Attachment Sections. <br />B. Reporting and Resolution: <br />WDM0522 Page 3 of 6 March 1, 2022 <br />