Page 204

State Plan Checklist - MANAGEMENT INFORMATION SYSTEM 8/14/2026 Page 6

e. The State agency acquires banking services through: Competitive bids among banks within the State Competitive bids among in State and out-of-State banks Use of State agency designated bank Other

f. The State agency acquires EBT services through: Competitive bids among EBT processors State hosted EBT services Other ADDITIONAL DETAIL: Management Information System Appendix and/or Procedure Manual (cite):

Attachments - AL Nutr. Serv. and Expenditures Overview - FY 2027, AL-OIT System and Services Acquisition Policy, AL-Conduent-EBT Processor Contract, AL-GComVoyatek-MIS Provider Contract

4. System Security/Data Confidentiality a. To ensure that data files and computer programs are protected, the State agency ensures that (check all that apply): [X] There is a separate organizational area/individual to control access to electronic storage media. [X] Access to WIC Program data files is controlled through password access or similar control. [X] Operational personnel are limited to only those jobs for which they are responsible. [X] Passwords are protected. [X] Passwords are changed periodically. [ ] The system access procedures are audited at least once a year. Please provide a copy of access procedures. [X] Procedures are implemented for timely removing passwords, ID's etc. when personnel leave. [ ] Biennial security reviews are performed. (Please provide a written summary of the most current biennial security review.) [ ] Periodic risk assessments are performed. [X] Data uploaded to mobile applications, participant portals, etc. are secure and participant Specify: Request for Proposal (RFP)