Page 382

Appendix VI

VDSS Information Security Policy and Procedures Disaster Food Stamp System Access

This document describes the procedures users must follow to gain access to the Disaster Supplemental Nutrition Assistance Program (D-SNAP) System when a disaster is declared within the State of Virginia and a locality opts to implement the Disaster Supplemental Nutrition Assistance Program. The Director of the Division of Benefit Programs, the Supplemental Nutrition Assistance Program Manager or the Manager of the Business Operations Unit must notify the Director of the Division of Information Systems that a disaster has been declared in the State of Virginia and there is likely interest in the Disaster Supplemental Nutrition Assistance Program. Upon notification from the Director of Information Systems, the Information Systems Security Unit will implement the procedures outlined in this Appendix.

Information Systems Security Unit Responsibilities

1. Once a disaster has been declared, the Information Systems Security Unit will ensure the following areas within DIS have been notified at the direction of the Director.

# Network Firewall for D-SNAP access implemented by On-Call Network Security Engineer

# Remote Dial-up/VPN implemented by VITA/DSS Telecommunications Group

# URL for application implemented by Information Systems DBA Group

# LDAP User Administration support implemented by Web Development Staff in Public Affairs

# Customer Care Center Supervisor notified

2. The Information Systems Security Unit will maintain a form entitled “VDSS Disaster System Access Request Form” on the Technology Business Support Services (TBSS) website that each locality will use to gain access to the system. The URL for the TBSS website is: http://www.localagency.dss.virginia.gov.us/tech_supp/index.cgi

3. The Information Systems Security Unit will e-mail an additional form to each local department Director and Agency Security Officer when there is a disaster to request remote access or an additional EBT Issuance Profile (Profile 6), if these functions are needed. The Information Systems Security Unit will process these requests with the additional approval from the EBT Group. This additional approval will help ensure a separation of duties from normal eligibility processes when possible. These documents should be faxed to the Information Systems Security Unit at (804) 726-7891 once they have been fully completed and appropriately signed. These requests will be processed upon receipt from local departments.

4. As each form is processed, the Information Systems Security Unit will notify the User and the Agency Security Officer by e-mail everyone’s User Id and password. The Information Systems Security Unit will provide each user requiring remote access instructions for downloading and installing the VPN software and the disaster.pcf file.

TRANSMITTAL #35