1.               PURPOSE

 

To establish a guideline for authorizing and terminating user card access to the E911 center.

 

2.               POLICY

 

This directive establishes the policy for user card access to the Atlanta Police Department E911 center.

 

3.               RESPONSIBILITIES

 

3.1              All supervisors and management personnel are responsible for ensuring the directives are implemented and administered in compliance with approved Policy.

 

1.    Access request to the E911 center will be provided to the E911 Security administrator in a formal document with appropriate authorization; and properly documented upon completion of the request.

 

2.    Request for new access or modification of existing access to the center will not be granted without a formal request with appropriate authorization and the approval of the E911 Director or Assistant Director.

 

3.    E911 Security Administrators will be responsible for providing and modifying all user access privileges to the E911 center upon receiving formal request and approval.

 

4.    Auditing will be implemented on all E911 security systems to record login attempts/failures and successful logins.

 

       5.        There will be periodic review privileges and audit logs on all E911 systems.

 

       6.        E911 managers and or supervisors who have contractors working within the center will be                       responsible for promptly notifying the Security Administrator immediately following their work                 completion within the center.

 

3.2              All employees and contractors/vendors are responsible for the enforcement of this Policy.

 

1.    Contractors and /or vendors who are working in the center must provide a work status to the Security Administrator on a weekly basis for proper data integrity of the security database.

 

2.    Individuals will only be given sufficient access privileges to areas they need to access in order to enable them to perform their job functions.

 

4.               ACTION

 

4.1              The E911 security consists of field accessed control devices supported by S2 Security Integration and biometric Iris scanners

 

4.2              Security components include the S2 security workstation, nodes, and scanners.

 

4.3              Access is granted by HID multi-class card reader and is communicated across the City of Atlanta local and wide area network.

 

4.4              This system is maintained and managed by the E911 Security Administrator, who oversees all S2 Iris security systems.

 

4.5              The Security Administrator will be responsible for maintaining the data integrity of the security system data and for determining access level rights.

 

4.6              E911 New Hire(s)

 

4.6.1           Upon receiving notification of a new hire from Human Resources, new hires will be required to complete an Access Card Approval form. This form will be provided by the E911 Administration staff and approved by the E911 Director or Assistant Director.

 

4.6.2           The Security Administrator will create an access card for the new employee with a distinct user ID.

 

4.6.3           The use of an employee’s ID badge by another is not permitted.

 

4.6.4           Employee’s access rights where he or she has access will be disabled immediately (no later than 24 hours) upon receiving notification from Human Resources or the employee’s supervisor that the employee is no longer employed with the E911 center, or suspended.

 

4.7              Technical Support Contractors and /or Vendors

 

4.7.1           Contractor’s and/or vendor’s access control will be granted by the Security Administrator upon completion of an Access Card Approval form and authorization from the E911 Director or Assistant Director.

 

4.7.2           Each contractor and/or vendor must complete an Access Card Approval form.

 

4.7.3           Contractor and/or vendor user access control card will be disabled immediately (no later than 24 hours) upon contract expiration or receiving notification that the contractor or vendor is no longer employed with the E911 center, is suspended, or is no longer authorized to be on the E911 property.

 

4.8              City of Atlanta Employee Technical Support

 

4.8.1           City of Atlanta (COA) Employee access privileges to E911 will be given based upon their job responsibility to the E911 center and dependent upon approval from the E911 Director or Assistant Director.

 

4.8.2           COA Employees must complete and Access Card Approval form.

 

1.    Employee card access will be revoked or modified to reflect the employee’s current job responsibilities and/or status immediately following a change in his or her job roles.

 

2.    Any expired access card or an access card that has been inactive for more than thirty (30) days will be disabled and moved to inactive status unless there exists a business reason or written request to keep it enabled.

 

4 8.3           Granting Access

 

1.    The following guidelines shall be followed at all times when creating new access cards or granting employees and contractors access to the E911 center:

      

a.    A new unique ID will be created for new employees.

 

b.    A card ID number will be assigned to each unique ID number.

 

c.    Each employee will have their eyes scanned via the Iris Monitor to gain access to critical areas in the E911 center.

 

d.    Expiration date must be set on all temporary employee or contractor access cards based on the last day of employment or contract with the center.

 

e.    A special designation such as “Temp” or “Contractor” should be used when creating access cards for temporary employees or contractors respectively in the Card Description field.

 

4.8.4     Revoking Access

 

1.    The following guidelines will be followed at all times when revoking employees and contractors’ access to the E911 center:

      

a.    Upon receiving an employee separation or suspension notification from Human Resources or an employee’s supervisor, the employee’s card access will be revoked immediately.

 

b.    A disabled card must not be re-enabled; it has to be re-created.

 

4.8.5           Reporting: Lost, Damaged/Violations and Enforcement

 

1.    Violation of the provisions of this policy must be reported immediately to the Security    Administrator, the Assistant E911 Director, and the E911 Director.

 

2.    A police report will be completed on all lost or damaged city issued badges. No new cards will be provided without a police report of lost or misplaced property.

 

3.    Lost or damaged employee access cards will be replaced once by theE911 center. All other occurrences will result in a $10.00 replacement fee.

 

4.    All employees and contractors/vendors are responsible for the enforcement of this Policy.

 

5.    All supervisors and management personnel are responsible for ensuring the directives are implemented and administered in compliance with approved Policy.

 

5.               DEFINITIONS

 

                  N/A

 

6.               CANCELLATIONS

 

                  N/A

 

7.               REFERENCES

 

                  N/A