Laserfiche WebLink
Security Policies and Procedures <br />D. Acknowledgement <br />All users shall be required to sign an acknowledgement after being trained on Virtru's <br />security and privacy policies. <br />E. Exit process for users <br />Upon exiting employment or any relationship with Virtru, all users who have been <br />granted access to any information asset shall: <br />1. Relinquish all access to control devices <br />2. Report all User IDs in use by the person <br />3. Relinquish all information stored, whether on paper or on backup media <br />4. Relinquish all information processing devices, including workstations, all <br />Virtru-owned mobile devices and others <br />All systems access will be revoked. <br />The ISO will verify termination is completed, and document this procedure has been <br />followed. See Exit Checklist. <br />F. Security Sanction Policy <br />Virtru's security policies call for the workforce that has access to electronic Protected <br />Employee or Client Data and others to perform certain duties and to refrain from <br />certain actions. Failure to do so will be sanctioned according to the policy below. <br />If the infraction involves the unauthorized use or disclosure of electronic Protected <br />Employee or Client Data, the sanctions below apply to the designated workforce <br />members including managers, supervisors, and staff who have access to Protected <br />Employee or Client Data. <br />We define a serious infraction as one that results in known significant damage or that <br />threatens imminent significant damage. Other infractions are simple infractions. The <br />process below is intended as guidance for our business management in sanctioning <br />Security Policies and Procedure infractions. We reserve the right to implement <br />sanctions differently if, in our judgment, the situation warrants it. <br />First Security Infraction <br />If the infraction is: <br />1. A simple infraction, and <br />2. The first infraction in the last 3 years <br />The sanction will be retraining the workforce member on the appropriate <br />policy/procedure and placement of a written letter of reprimand in the employee file. <br />Rev.2015.8.6 <br />34 <br />