Page 2

Attachment #2, 1.26 LOCAL AGENCY SECURITY SURVEY Page 2 of 3

B. Equipment Security 1. If laptops are used at your sites, where are they stored when not in use?

2. Who is responsible for the laptops?

3. Is there a system for checkout and return of laptop?

4. Are laptops connected to the network at least every 30 days for updates?

5. What are the allowable reasons for laptops to leave the office?

6. Is there a detailed inventory of all equipment maintained?

7. If yes, where is the detailed inventory of all equipment maintained kept?

8. Who is responsible for updating the detailed inventory of all equipment maintained?

9. What agency or entity is responsible for insurance and other valuables at the WIC local agency clinics?

10. How are computers protected against the busy hands of toddlers in the WIC offices?

11. Are desktops, laptops, and the server inaccessible to unauthorized users (i.e., located away from public areas)?

12. Are participants escorted into and out of computing areas?

13. Are computers locked when the employee steps away from their desk?

C. Personnel Security

1. Is a list maintained of all persons who have access to WIC facilities and equipment?

2. If yes, who is responsible for maintaining the list?