We control access to rooms and file cabinets where paper records are kept.:
• We lock doors to our offices during non-business hours
• Work areas where confidential customer information is processed are separate from public areas.
• Guests are restricted to areas that do not have customer information in plain view.
• Guests are escorted in areas where customer information is being processed.
• File cabinets used to store customer information are locked or are secured in locked areas.
• Documents on longer needed are disposed of in designated recycling/shredding containers.
We control access to information stored electronically
• Workstations are password protected and not accessible to the public
• We minimize screens not in use
• Employees are encouraged to logout or lock their workstations when not in use.
• We use appropriate passwords, in accordance with Data Protection guidelines.
• Network and email access – at least 8 characters, alphanumeric & special characters.
• We change passwords at periodic intervals
• We do not display our passwords near or on computers
We protect our customer’s information
• We refer to the appropriate security policies as needed to ensure our compliance
• We report fraudulent attempt to obtain customer information to management, who then report the attempt to the appropriate law enforcement agencies
