Page 6

West Virginia WIC Policy & Procedure 1.26 Effective Date: 3/20/2018 1.26 Security Policy

6 of 12

All Local Agency staff is required to have mandatory online information security awareness training performed annually. This training is provided by WV Office of Technology annually and is provided online.

E. Personnel Security Controls

1. Organization

Responsibilities in this area include that of the SA and MIS Department to hire and train personnel in proper security procedures. WIC/MIS shall hire and maintain certain levels of personnel with differing roles and responsibilities. Staff shall always have someone who can back them up if the need arises. Personnel shall be assigned certain roles and responsibilities according to their skills.

The SA will establish the roles and responsibilities of MIS Personnel. The WIC SA and LA Users will adhere to all current state procedures and outlined roles and responsibilities as outlined in Reference I, Policy 3.0 - Management and Staff Responsibilities.

The SA will maintain and update as needed a set of roles and responsibilities for all MIS staff. This will be done on a periodic basis, probably during Employee Evaluations and reviews. Once established, these responsibilities should not be modified unless job duties change. WIC/MIS Project Leader and WIC Equipment Coordinator report to DHHR/MIS supervisory staff and receive direction from WIC State Agency Administrative staff. The Helpdesk Analyst and Crossroads Project Manager will report directly to WIC State Agency Staff.

2. The Current WIC/MIS positions and responsibilities are as follows:

a. WIC Security Officer

• Approve and Maintain Local Agency User Sign-on’s to the LAN. • Developing the ADP Security Policies/Plan along with the WIC/MIS Project Leader and the Crossroads Project Manager. • Investigate security breaches of any type recommending emergency procedures when deemed necessary. Informing MIS and WIC administration of problems as necessary. • Monitor adherence to WVOT and WVDHHR Security Policies. • Assist in contingency planning for emergencies at the local level. • Review biennial security review of 20% of WIC Sites completed by the WIC Equipment Coordinator according to the review policy. • Maintain a list of all Logon ID’s issued and what locals they are assigned to and their duties. • Coordinate with the Field PC Technician, the inventory of WIC computer equipment.

b. Crossroads Project Manager

• Supervise Helpdesk Analysts and EBT coordinator positions