Page 10

West Virginia WIC Policy & Procedure 1.26 Effective Date: 3/20/2018 1.26 Security Policy

10 of 12 WIC Office.

F. Physical Security Controls

1. Access Control

a. Physical access to WIC sites will be maintained. b. Facility will be locked at all times when authorized personnel are not present. c. SA/LA personnel shall wear name badges at all times. d. Unauthorized individuals shall be escorted at all times by LA/SA staff. e. If access is via an electrically controlled system, a determination must be made if it can be operated by standby battery power or overridden by an accessible key.

2. Equipment Security

a. WIC Equipment Coordinator will maintain an inventory of all ADP equipment with serial numbers, locations and maintain records. This information is also to be kept by the LA which is updated and submitted to the SA biennially per State WIC Policy & Procedure 6.15.

b. File servers will be placed in limited access area if possible. If this is not feasible, servers may be stored in a protective cabinet or by restricting client access to the area.

c. Proper equipment maintenance/warranty coverage will be maintained for all PC equipment.

d. All computer equipment with memory stored inside hardware must be picked up by WV eRecycle team. WV eRecycle will ensure that all data has been wiped from the device prior to surplus/retirement.

G. Environmental Security Controls

A West Virginia WIC Program Site Description Chart (Reference VI) will be completed/updated for each site administered by each Local WIC Agency by July 1 of each year. This survey will be used for any potential site when relocating clinics. All site surveys will contain emergency contact numbers with a primary number and a secondary phone number for each site.

The Local Agency will complete the Local Agency/SA Security Survey (Reference VII) by July 1 of each year.

Environmental Security - (See Reference I - State of WV Information Security Policy 4.4 Physical & Environmental Policy)

1. Water Damage

a. Local Agencies will consider environmental issues that may affect clinic and equipment operations when choosing a new clinic site. Potential sites should