Laserfiche WebLink
CITY OF PLEASANTON – INFORMATION TECHNOLOGY DEPARTMENT v2.5 <br />INFORMATION TECHNOLOGY – 3 RD PARTY ACCESS <br />8.Inactivity Timeout: Remote access sessions will automatically time out after 20 <br />minutes of inactivity, aligning with COP’s security policies. Users will need to re- <br />authenticate to regain access. <br />9.Reporting Responsibilities: In the event of damage, loss, or theft of a device used <br />for remote access, the ITSC must immediately notify COP ITD. For incidents occurring <br />outside of regular business hours, contact should be made via the Support Desk email <br />(itrequest@cityofpleasantonca.gov), the Service Desk phone line (925.931.5083), or <br />SMS text to the same number. <br />10.Incident Reporting: ITSCs must promptly report any unauthorized access incidents <br />or suspicions to COP ITD, ensuring rapid response and mitigation. <br />11.Monitoring Consent: ITSCs acknowledge and consent to the monitoring of their <br />remote access to record session details and detect unusual patterns or suspicious <br />activities. <br />4.4 Policy Non-Compliance and Access Revocation <br />To ensure the security and integrity of the City of Pleasanton’s Information Technology <br />infrastructure, the following refined policy outlines the conditions under which remote <br />access privileges may be revoked: <br />1.Completion of Assignment: Remote access privileges granted to contractors will be <br />automatically revoked upon completing their assigned project or contract term. This <br />ensures that access is only available to active, authorized users in alignment with <br />ongoing business needs. <br />2.Separation or Termination of Employee: In the event of an employee or contractor's <br />separation or termination from the ITSC, COP ITD must be promptly notified. This <br />notification must occur immediately upon confirmation of the individual's departure. <br />Notification should be executed through the designated channels outlined in Section <br />4.3.9 – Reporting Responsibilities. Additionally, the notification should include the <br />following information to facilitate access revocation and safeguard COP ITD's <br />systems: <br />•Full name and identification details of the separating or terminating individual. <br />•The individual's role and the projects or systems they had access to. <br />•The effective date of separation or termination. <br />•Any relevant details regarding the separation or termination that may affect COP <br />ITD's security posture. <br />Docusign Envelope ID: 4B3DD47E-7332-8163-807C-64B627C64358