Laserfiche WebLink
a possible need for revision, the Program Administrator will consider the City's <br />experiences with Identity Theft situation, changes in Identity Theft methods, changes in <br />Identity Theft detection and prevention methods, changes in types of accounts the City <br />maintains and changes in the City's business arrangements with other entities. After <br />considering these factors, the Program Administrator will determine whether changes to <br />the Program, including the listing of Red Flags, are warranted. If warranted, the <br />Program Administrator will update the Program or present the Committee with his or her <br />recommended changes and the Committee will make a determination of whether to <br />accept,modify or reject those changes to the Program. <br />VII. PROGRAM ADMINISTRATION. <br />A. .Oversight <br />Responsibility for developing, implementing and updating this Program lies with an <br />Identity Theft Committee for the City. The Comrittee is headed by a Program. <br />Administrator who is the' Treasurer. Two or more other individuals appointed by the <br />head of the City .or the Program Administrator comprise.the remainder of the committee <br />membership. The Program Administrator will be responsible for the Program <br />administration, for ensuring appropriate training of City staff on the Program.,. for <br />reviewing any staff reports regarding the detection of Red Flags and the steps for <br />preventing and mitigating Identity Theft, determining which steps of prevention and <br />mitigation should be taken in particufar circumstances. and considering periodic changes <br />to the . Program. <br />13. Staff Training and Reports <br />City staff responsible for implementing the Program shall be trained either by or under <br />the direction of the Program Administrator in the detection of Red Flags, and the <br />responsive steps to be taken when a Red Flag is detected. <br />C. Service Provider Arrangements <br />In the event the City engages a service provider to perform an activity in connection with <br />one or more accounts, the City will take the following steps to ensure the service <br />provider performs its activity in accordance with reasonable policies and procedures. <br />designed to detect, prevent, and mitigate the risk of Identity Theft. <br />1. Require, by contract, that service providers have such policies and procedures in <br />place; and <br />2. Require, by contract, that service providers review the City's Program and report <br />any Red Flags to the Program Administrator. <br />8 <br />