Laserfiche WebLink
1.Ensurinq employee does not <br />access any eeëntyCounty computer or mobile storage device <br />after ‡hey-aFe-terminated-termination <br />2.Obtaininq any passwords used for software (except their network password) <br />3.Immediately disablinq any software and software-as-a-service accounts <br />45-4.Notifyinq IT of legal hold requirements,includinq hard drive and electronic <br />records <br />If records are to be placed on legal hold,the DHIEOldesignee will: <br />1.Identify all devices that could contain records subject to the legal hold <br />1.Computers (desktops,laptops,tablets,e‡eetm) <br />2.Mobile storage devices (USB drives,CD/DVDs,eteetm) <br />3.Smartphones <br />2.Turn off identified devices;once turned off do not allow the devices to be turned on <br />prior to IT taking possession <br />3.Ensure the employee does not have access to the identified devices;the employee <br />should not have personal files on eeuntyCounty devices,but should they have,the <br />DHIEOldesignee will have access to them a few days after termination and can <br />forward them to the employee <br />4.Notify IT of all electronic records to be placed on legal hekkhold,including <br />1.Employee(s)affected <br />2.Equipment affected (asset tags) <br />3.Lead Deputy Prosecuting Attorney involved <br />5.Give IT identified devices <br />IT will follow its internal procedures for legal holds. <br />4.4.7 Auditinq <br />IT shall validate information system level accounts and access rights with DHIEOs annually <br />and shall document the validation process.(CJIS 5.9 §5.5.1) <br />4.4.8 Privilege Rights <br />The allocation of information system level privileqe rights (domain administrator,local <br />administrator,elevated privileges,super-user,and root access)shall be administered by IT <br />as approved by the IT Director.Privilege rights will be assiqned to a separate user account, <br />and with MFA [link to 7.3.3]required wherever possible or when another compensatinq <br />control is not available.Privileqe accounts shall be used only to perform duties specifically <br />requirinq the privileqe riqhts.All other work shall be completed usinq the employee's non- <br />privileqed account. <br />Privileqe riqhts within software controlled by a DHIEO will be limited only to those employees <br />who need access to compete their assigned official duties.IT shall be provided at least one <br />administrative account to all systems and software for emerqency access. <br />4.5 Responsibilities <br />4.5.1 DHIEO <br />17