Laserfiche WebLink
Security Policies and Procedures <br />1. Professional qualifications <br />2. Identity checks <br />3. Criminal checks <br />4. Confirmation of academic and professional experience <br />The ISO is responsible for ensuring that background checks are made biannually on <br />parties who are not newly hired workforce members. A third party will conduct <br />background checks. <br />B. Training and Awareness <br />Virtru will provide security awareness training to each new member of our workforce <br />with access to electronic Company -awned or private data (Refer to Data Types <br />information Classifications) whose activities in the business we directly control. The <br />training will be provided prior to that person assuming his/her duties. The training is <br />designed to inform the person of his/her responsibilities under Virtru's security <br />policies. At a minimum, this training will include the workforce member's role in: <br />1. Managing malicious software (e.g. viruses) <br />2. Using workstation(s) securely <br />3. Managing passwords and <br />4. Monitoring and reporting suspicious use of account(s) <br />Virtru's employees will also be trained annually on Virtru's Policies and Procedures. A <br />record of successful completion of this training and annual retraining will be kept <br />online by Total HIPAA Compliance. <br />Within 30 days of starting, individuals who are employed as developers will receive <br />training on the security measures and mechanisms used to protect the company's <br />systems and service. All new developers will be required to take and pass online <br />training modules covering secure coding when using Nodes. Developers who will be <br />managing or developing operational aspects of the company's systems will also be <br />required take the Security Operations on AWS training course from Amazon. <br />A record of training will be kept of training that lists the employee, type of training, <br />date of completion, the employee's signature, and an admins signature asserting <br />successful completion of the training. <br />C. Terms of employment <br />Compliance with Virtru's policies regarding security and privacy are a condition of <br />employment. <br />Rev.2015.8.6 <br />33 <br />