Page 4

f. The State agency acquires EBT services through: ☒Competitive bids among EBT processors ☐State hosted EBT services ☐Other: N/A. ADDITIONAL DETAIL: Management Information System Appendix and/or Procedure Manual (cite): Equipment purchased by WIC funds are used for WIC only purposes West Virginia Purchasing Division http://www.state.wv.us/admin/purchase/swc/default.html and Statewide Contract http://www.state.wv.us/admin/purchase/swc/IP.htm 4. System Security/Data Confidentiality a. To ensure that data files and computer programs are protected, the State agency ensures that (check all that apply): ☒There is a separate organizational area/individual to control access to electronic storage media. ☒Access to WIC Program data files is controlled through password access or similar control. ☒Operational personnel are limited to only those jobs for which they are responsible. ☒Passwords are protected. ☒Passwords are changed periodically. ☒The system access procedures are audited at least once a year. Please provide a copy of access procedures. ☒Procedures are implemented for timely removing passwords, ID's etc. when personnel leave. ☒Biennial security reviews are performed by MIS. Twice a year MIS staff perform a network audit. They pull a list of users within the ONS group reviewing the last login date. MIS contacts the director of any staff member that has not logged in recently to verify if they are still employed. If an employee is no longer employed, a deprovision form is completed to remove network access and access to Crossroads is disabled. ☒Periodic risk assessments are performed by MIS. ☒Data uploaded to mobile applications, participant portals, etc. are secure and participant information is protected. ☐Other (specify): N/A. b. To ensure that disaster contingency plans (e.g., file storage, backup hardware, and software procedures) are sufficient to allow the management information and electronic benefit transfer systems to recover and continue processing after fire, flood or similar disaster, the State agency ensures that (check all that apply): ☒Backup copies of files and program are stored off-site in a secure location. Please provide address of location. 1740 Union Carbide Drive South Charleston, WV 25303 4