This page contains a Flash digital edition of a book.
PERIODIC UPDATES TO PLAN


a: At periodic intervals established in the program, or as required, the program will be re- evaluated to determine whether all aspects of the program are up-to-date and applicable in the current college environment.


b: Periodic reviews will include an assessment of which accounts are covered by the program.


c: As part of the review, red flags may be revised, replaced or eliminated. Defining new red flags may also be appropriate.


PROGRAM ADMINISTRATION a: Involvement of the administration


1. The Identity Theft Prevention Program is the responsibility of the Board of Trustees. Approval of the initial plan will be appropriately documented and maintained.


2. Operational responsibility of the program is delegated to the Vice President for Finance and Administration, who may also delegate to appropriate personnel.


b: Staff training


1. Staff training will be conducted for all employees, officials and contractors for whom it is reasonably foreseeable that they may come into contact with accounts or personally identifiable information that may involve a risk to the college or its customers.


2. These employees will receive annual training in all elements of this policy; they may continue to receive additional training as changes to the program are made.


c: Oversight of service provider arrangements


1. The college will ensure that the activities of all service providers are conducted in accordance with reasonable policies and procedures designed to detect, prevent, and mitigate the risk of identity theft. Each employee working with service providers is responsible for informing those providers of the requirements of this policy.


2. A service provider that maintains its own identity theft prevention program, consistent with the guidance of the red flag rules and validated by appropriate due diligence, may be considered to be meeting these requirements.


3. Any specific requirements should be specifically addressed in the appropriate contract arrangements.


16


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26  |  Page 27  |  Page 28  |  Page 29  |  Page 30  |  Page 31  |  Page 32  |  Page 33  |  Page 34  |  Page 35  |  Page 36  |  Page 37  |  Page 38  |  Page 39  |  Page 40  |  Page 41  |  Page 42  |  Page 43  |  Page 44  |  Page 45  |  Page 46  |  Page 47  |  Page 48  |  Page 49  |  Page 50  |  Page 51  |  Page 52  |  Page 53  |  Page 54  |  Page 55  |  Page 56  |  Page 57  |  Page 58  |  Page 59  |  Page 60  |  Page 61  |  Page 62  |  Page 63  |  Page 64  |  Page 65  |  Page 66