Policy Statement

EIT Operations and Compliance will maintain a secure state and comply with regulatory requirements; core processes are established to manage these policies and requirements. The management groups providing services for Enterprise Information Technology will include Incident; Change; Problem; ervice !evel and "vailability; #usiness Continuity and $isaster %ecovery; Capacity Planning; &inancial 'anagement; ecurity; and (endor and "sset %is) 'anagement. Each ervice "rea adheres to the defined policies and procedures administered within these management areas. Compliance provides real*time violation monitoring for all ma+or platforms, as well as audit responses for Internal and e-ternal audits for user I$ enquiries, helping to facilitate. This service includes &acilitating and $efining .overnance, Identity 'anagement, 'aintaining Compliance Programs, Compliance "ssessment, and CCC hift 'anagement 'aintaining the following environments/ Compliance and governance, EC' $ocument %epository, &acilitate ecurity Change "pprovals. erves as primary source for account related inquiries from auditors, including I"$ and e-ternal audits for all lines of business

Purpose

Scope

Definitions Term Facilitating and Defining Governance $efinition Policy generation Interpret governance Compliance consultation Identity administration 0ser1account provisioning $irectory services "uthentication 'anages incident response for technical security related events Compliance reporting &acilitate internal and e-ternal audits elf security assessment Page 2 of 3

Identity Management

Maintaining Compliance Programs

Compliance Assessment

Definition of Employment Classifications Table

Sample section with three-tiered classification ta le!

4E-ample of a three*tiered classifications table with sample lead* in/ 56 are defined as follows/7
CPS Status &ull*Time Part*Time FLSA Classification alaried, e-empt or non*e-empt alaried, e-empt or non*e-empt, employee Hours Worked 89 hours per wee) on a regular basis !ess than 89 hours per wee) for an e-tended or indefinite time period :or)s a specified timeframe based on business needs and normally does not e-ceed 2,;99 hours in a 23*month period.

Temporary Employee

alaried, e-empt or non*e-empt, employee

Exclusions

elated Policies!

Policy "ssue Dates

Issued/ 312912<;= %evised/ 221212<<>, ?121399<

Page 3 of 3