Laserfiche WebLink
15 <br />Part 4: Monitoring, Detection, and Surveillance <br />There is no expectation of privacy with regard to the access or use of ISO ClaimSearch®, including any <br />ISO ClaimSearch Information. Misuse of ISO ClaimSearch or any ISO ClaimSearch Information can <br />result in termination of access privileges as well as disciplinary action by ISO ClaimSearch and/or the <br />Participating Organization. If improper or unauthorized use originating from a Participating Organization <br />is detected, ISO will investigate and will notify the Participating Organization as soon as possible. <br />1 . Threat Monitoring <br />ISO ClaimSearch may monitor threats to the confidentiality, integrity, and availability of ISO ClaimSearch. <br />Monitoring may include, but is not limited to: <br />• improper attempts to access the database <br />• the number of illegal, unauthorized attempts to access the database system or its resources <br />• unusual patterns of behavior <br />2 . Audit Trail <br />ISO, at its discretion, may also interrogate the ISO ClaimSearch audit trail to identify who performed a <br />search on any specific individual or location as a further audit mechanism to ensure proper use of the <br />system. ISO encourages its Participating Organizations to request audit trail reports to self-audit their <br />Authorized Users’ activity. <br />3 . Incident Response <br />• ISO ClaimSearch — All reported incident findings, regardless of outcome, are tracked and <br />documented; all assets involved are preserved; and post-incident review is conducted to <br />continually improve our internal processes, if need be. <br />• Participating Organizations — Participating Organizations and Authorized Users are required <br />to notify ISO ClaimSearch of any suspected or actual compromise of ISO ClaimSearch or any <br />ISO ClaimSearch Information. Should an ISO ClaimSearch Participating Organization suffer a <br />breach situation that may affect ISO ClaimSearch, the organization is required to notify <br />ClaimSearchCompliance@iso.com within a reasonable time frame. Should an NICB Participating <br />Organization suffer a breach situation that could affect ISO ClaimSearch or any ISO ClaimSearch <br />Information or the National Insurance Crime Bureau, the organization is required to notify <br />techsupport@NICB.org within a reasonable time frame. <br />Docusign Envelope ID: 329281D2-142C-8B83-837A-7CD218C257C4