Colorado WIC Program Policies and Procedures Section 3: MIS Revised: 01/01/2022

Page 1 of 1

WIC Compass User Access

Policy: Local WIC Agency Directors must complete necessary forms to ensure that Compass user access is granted to Compass users who actively work at a specific WIC clinic. The Compass Access Request Form must be completed and submitted each time a new staff person is hired, when their position responsibilities change and when their WIC employment ends.

Regulation: Colorado WIC Policy

Procedure/Additional Guidance: Compass Application and Data Security The Compass system requires a user to log into the system using credentials created by the WIC Compass Care Team. The Compass Access Request Form includes the data security, use, and confidentiality agreement that each employee must read and sign. Signatures from the WIC supervisor and WIC employee are required and the printed copy can be faxed or scanned & emailed to the WIC Compass Care Team

Staff can change their passwords after a successful log on using the provided User ID and Password. User IDs and passwords are not to be shared with others. Every 120 days, Compass prompts the user that the old password is about to expire and a new password must be entered. Passwords must be strong to be secure. Strong passwords are at least 8 characters in length, have a mixed case (some capitals and some lowercase letters), have at least one number, and have a special character.

For data security purpose and to ensure that only active user’s have access to the Compass sytem, the Colorado WIC State Office will deactivate any user who has not been active in Compass for 8 weeks. Staff that are inactive for 8 weeks due to situations such as medical leave, can be reactivated by submitting a ticket in Elementool.