NATIONAL INSURANCE CRIME BUREAU - Laserfiche WebLink

9 • Do not send ISO ClaimSearch Information unencrypted over the Internet that identifies an individual. • Dispose of ISO ClaimSearch Information that is no longer needed using industry-standard best practices. • Do not sell ISO ClaimSearch Information. • Physically and logically secure all hardware and all media that access ISO ClaimSearch, or access or contain ISO ClaimSearch Information, to prevent unauthorized access, use, or theft. • Encrypt and protect (for malware, intrusion, and so forth) portable electronic devices (workstations, laptops, tablets, phones, and so forth) used to access ISO ClaimSearch or ISO ClaimSearch Information with commercially available industry-standard encryption. • Encrypt any and all media used to store ISO ClaimSearch Information with commercially available industry-standard encryption. • Do not use personally owned computers to access ISO ClaimSearch or ISO ClaimSearch Information unless you log in to the Participating Organization network through a virtual desktop environment. • Do not use nonbusiness e-mail accounts to send or retrieve ISO ClaimSearch Information. • Do not mail or courier ISO ClaimSearch Information in any form without encryption or masking of personally identifiable information. • Do not leave ISO ClaimSearch hard-copy records/files or electronic devices in plain sight when unattended. • Do not return hard drives to vendors for warranty repair or replacement if the device was ever used to access ISO ClaimSearch or access or store ISO ClaimSearch Information without securely deleting ISO ClaimSearch Information from the device. • Physically secure ISO ClaimSearch Information (in a locked drawer, cabinet, desk, or safe, for example) when not in use or not otherwise under the control of an Authorized User and only in an area where access control measures are employed to prevent unauthorized access by members of the public or other unauthorized persons. • Access ISO ClaimSearch or access or use ISO ClaimSearch Information only when working from a protected device according to industry standards. Device protection shall include, but not be limited to, malware protection and encryption. • Always lock your device (for example, workstation, laptop, notebook, tablet, phone) or log out of ISO ClaimSearch when not at your device. • Set an inactivity time-out on all devices used to access ISO ClaimSearch or ISO ClaimSearch Information not to exceed 30 minutes for secure facility-based workstations and no greater than 15 minutes for mobile computing devices. • Dispose of ISO ClaimSearch Information using industry-standard best practices, including the following: – Securely delete hardware (hard drives, memory, printers, fax machines, CDs, DVDs, flash drives) that may contain ISO ClaimSearch Information using secure delete, degaussing, or physically destroying. – Dispose of paper using cross-cut shredder or incineration. Docusign Envelope ID: 329281D2-142C-8B83-837A-7CD218C257C4