9-21 Safeguarding EIV Data

• A. Technical Safeguards

  1. All individuals who have access to the EIV system must have a valid WASS User ID and password and must use this ID and password for accessing the EIV system. Upon receipt of the assigned WASS User ID, an individual must then apply to be approved for access to the EIV system.

  2. To assist in ensuring that only those individuals who have a need to use the EIV system to perform their job function have access to the EIV system, users must be certified to use the system:

     • a. EIV Coordinators are certified at initial access and annually thereafter.

     • b. EIV Users are certified at initial access and bi-annually thereafter.

If this certification is not made, the user’s EIV access is terminated.

3. A Security Awareness Training Questionnaire, which supplements required annual security training, may be completed at the time of initial access to the system and annually thereafter. The EIV system is designed with the ability to block the entry of those individuals who have not successfully completed the questionnaire (i.e., answered 90 percent of the questions correctly).

• B.