ADMINISTRATIVE POLICIES & PRACTICES WPPM #140-20 Subject: Program Integrity Item: Employee Security Affidavit and User Identification (Logon ID)

Revised California WIC Policy and Procedure Manual Page 1 of 2 April 14, 2025 PURPOSE: To ensure the security and integrity of the WIC Information System Exchange (WIC WISE). POLICY: I. Local agencies (LA) must have all staff, regardless of their duties, who have access to the WIC WISE read and sign the Employee Security Affidavit (ESA) annually (once each calendar year). II. The ESA must be signed prior to accessing WIC WISE. The WIC WISE logon ID serves as the staff member’s signature or “fingerprint” on all activity conducted while in WIC WISE. Each staff member whose duties require WIC WISE access must have a unique logon ID. PROCEDURES: I. All LA employees with WIC WISE access must read and sign the ESA form and comply with the following: A. Be responsible for all information entered and functions performed. B. Exercise all security requirements to protect integrity and confidentiality. Refer to WPPM 120-10. C. Do not share logon ID and password with any individual, including applicants, participants, and other staff. D. Do not create a generic WIC WISE logon ID. E. Take all precautions and efforts necessary to protect the visual observation of their Logon ID and password when they enter it into the WIC WISE. F. Logon to only one terminal at a time with a valid WIC WISE Logon ID. G. Understand that appropriate action (as determined by CDPH/WIC or LA) may be taken against them if they do not comply with the security requirements of this policy.

ADMINISTRATIVE POLICIES & PRACTICES WPPM #140-20 Subject: Program Integrity Item: Employee Security Affidavit and User Identification (Logon ID)

Revised April 14, 2025 California WIC Policy and Procedure Manual Page 2 of 2 II. The LA must ensure that no generic logon IDs are in use and conduct regular reviews and maintenance of the WIC WISE logon IDs for the agency. The LA authorized staff must: A. Review the agency’s WIC WISE logon ID Maintenance Report and inactivate any logon IDs of former employees and any other unnecessary logon IDs. Frequency as stated in the WIC Local Agency Agreement. B. Review the Local Logon ID maintenance process to add, change, deactivate, or reset logon IDs and passwords. C. Perform logon ID functional security within the agency. AUTHORITY: 7 CFR §246.26 CROSS REFERENCE: WIC Local Agency Agreement WPPM 120-10 Access to and Security of Confidential Information