Or. Admin. Code § 333-049-0130 - Security

(1) All authorized users shall abide by such security policies and procedures to safeguard information in the IIS deemed necessary by the program. Such policies and procedures may include, but are not limited to, confidentiality agreements, the use of computer passwords, and user identification numbers. The program shall provide copies of the policies and procedures to all authorized users who participate in either or both the IIS or tracking and recall system.

(2) The program shall develop security standards to safeguard the information in the IIS. The standards will address, but not be limited to, the collection, transfer, storage, and processing of information in the IIS and tracking and recall system.

(3) The program shall review the security policies, procedures, and standards at least once each year and shall revise such policies, procedures, and standards as necessary.

Notes

Or. Admin. Code § 333-049-0130

HD 6-1996(Temp), f. & cert. ef. 11-26-96; HD 4-1997, f. & cert. ef. 2-24-97; OHD 13-2001, f. & cert. ef. 7-12-01, Renumbered from 333-019-0160; PH 256-2018, amend filed 11/02/2018, effective 11/12/2018

Statutory/Other Authority: ORS 433.098

Statutes/Other Implemented: ORS 433.098