Page 5

West Virginia WIC Policy & Procedure 1.26 Effective Date: 3/20/2018 1.26 Security Policy

5 of 12 equipment will be placed in a manner that prohibits access. This will be accomplished by storing the equipment in a protective cabinet or restricting client access to the area. The LAN file server is never to be used as a workstation. Policies are placed on file servers to allow access only by the Network LAN Specialist.

b. State Office: Networking equipment and servers for state personnel is located in the computer room at Bldg6 of the WV State Office Complex.

c. In addition, both the WIC state office and LA clinics will follow the West Virginia State IT Policy - Physical and Environmental Security, Reference I, Policy 12.0.

D. Information Security Controls

1. Data/File Protection – The following guidelines will be followed by both the SA and LA staff to ensure proper data/file protection:

Backup and Recovery

State Office

a. All servers holding information pertinent to WIC will perform full backups nightly via the network to an external storage device.

b. In case of a data loss, or hardware failure in a file server, a full backup will be restored by WV Office of Technology staff.

c. All servers will be connected to a power conditioning UPS in order to prevent data loss and hardware damage.

Clinic Sites

a. All file servers located at WIC clinics will be backed up nightly with a 30-day retention.

b. In case of a data loss, or hardware failure in a file server, a full backup will be restored by WV Office of Technology Staff

c. All servers will be connected to a power conditioning UPS in order to prevent data loss and hardware damage.

d. Files should not be saved to the Clinic PC’s as they are not backed up.

2. Data/Software Backup

Application backups are also being completed for the Crossroads servers by WV Office of Technology back up procedures.

3. Security Training