Re: Fw: hermagine Audit Preparation

[http://dummy.us.eu.org/robert <http://dummy.us.eu.org/robert>]

 Employees are expected to log off or lock computers whenever they leave
 their work areas for any reason.  A password protected screensaver must
 also be used with an automatic activation feature set at 15 minutes or
 less.

First, you need to tell them that your work area is decidicated to work
only, even though it isn't.  That is, the entire room is only used for
work, when we know that it isn't.

We can set a password for computer and set the screensaver to go to login
screen when it is broken, and to automatically start the screensaver after
15 minutes.

 Employees working remotely are expected to keep their equipment that has
 access to PHI in a room with a lockable door.

The door is lockable, but they'll probably ask whether it is lockable from
the outside and that you lock it when you leave the room.  You need to say
"yes" to both.

I suggest that you put a piece of masking tape over the webcam camera just
in case they ask you to turn the laptop towards the door; tell them the
webcam is broken.

 Employees are expected to keep an up-to-date anti-virus program on their
 systems at all time.  Proof of this anti-virus will be requested upon
 hire and may be requested thereafter.

You are running AVG and they'll probably ask you to bring it up to show
the last update time.  Be sure you know how to do this.

Of course, all of this would've been easier if they had provided you with
a company-issued laptop.

 > From: http://dummy.us.eu.org/robert <http://dummy.us.eu.org/robert>
 > Date: Sat, 12 May 2018 08:07:52 -0700
 >
 > Unfortunately, I cannot see the list.
 > 
 > I guess I'll have to download it.
 > 
 >  > From: "Noelle" <noelle>
 >  > Date: Fri, 11 May 2018 19:57:00 +0000
 >  >
 >  > ----------------------------------------------------------------------- From: DoNotReplyCorporateCommunications
 >  > Sent: Friday, May 11, 2018 11:31 AM
 >  > Subject: hermagine Audit Preparation  
 >  > 
 >  > Team,
 >  > 
 >  > As part of hermagine?s ongoing commitment to security, an audit by an
 >  > outside firm will be conducted in early to mid-June, to ensure we meet the
 >  > standards that we have set forth in our policies.
 >  > 
 >  > This audit covers all hermagine employees, including the employees in the
 >  > field working off of their personal machines.  The auditor will be
 >  > choosing employees at random to test.  It is very possible you will be
 >  > contacted by us, asking you to allow us to remote in with you to take
 >  > screenshots proving your machine is up to standards.
 >  > 
 >  > PLEASE NOTE ? this call will only come from Kimm Shaw, Justin Perga, or
 >  > Ramon Grimsley.  An email from a hermagine solutions email address will be
 >  > sent ten minutes prior to the phone call to allow you time to close out of
 >  > any client system.  The email will contain a link and instructions for
 >  > running TeamViewer, which will give us visibility into your system.  As
 >  > always, if anyone else calls you requesting access to your computer
 >  > (meaning anyone other than Kimm Shaw, Justin Perga, or Ramon Grimsley) ,
 >  > please let them know that due to security concerns you cannot speak to
 >  > them or allow them access to your computer.
 >  > 
 >  > Please take a moment to review our Acceptable Use Policy copied below
 >  > (taken from the Employee Handbook).  Items highlighted in yellow are
 >  > examples of things that might be audited.
 >  > 
 >  > Thank you,