National Initiatives

iCAMS Security Requirements for Service Provider Organizations

November, 2002

>>Adobe® Acrobat format, size 338 K 28 pp

TABLE OF CONTENTS

Executive Summary

Introduction

PART I: User Security

1. The reliability assessment

1.1 Background

1.2 Verification of information

1.3 Exemptions

1.4 Conflict of interest

1.5 Validity, updating and revoking

1.6 Sub-contracts

2. Processing reliability assessment information

2.1 User consent

2.2 Verification of personal, educational and employment information and/or references

2.3 Verification of the criminal records check results

2.4 Completing the 'iCAMS User Authorization and Reliability Assessment Form' (optional)

3. The reliability assessment decision

4. A positive reliability assessment

4.1 The security briefing

4.2 Completing the 'iCAMS Username and Password Request/Update Form' (mandatory)

5. Reliability assessment records

5.1 Retention, disposal and access

6. Cancelling an iCAMS Username and Password

6.1 Completing the 'iCAMS Username and Password Cancellation Form'

PART II: IT Security

1. Background

2. The iCAMS environment

3. Requirements: Stand-alone (non-networked) computers accessing iCAMS

4. Recommendations: Networks and networked computers

PART III: Physical Security

1. Background

2. Requirements

PART IV: Security Breaches and Violations

Appendices

Appendix A - Guidance

Appendix B - iCAMS User Authorization and Reliability Assessment Form

Appendix C - iCAMS User Security Requirements

Appendix D - iCAMS Username and Password Request/Update Form

Appendix E - iCAMS Username and Password Cancellation Form

Appendix F - Feedback Form iCAMS Security Requirements for Service Provider Organizations

<< contents | next >>