**Manager may elect to conduct an initial phone interview for out-of-state candidates. However, ALL candidates chosen for an interview will have to attend a personal interview, NO Skype, NO exceptions

THE VDH INFORMATION SECURITY PORTAL NEEDS TO BE MODIFIED TO ACCOMMODATE SOME AUDIT RECOMMENDATIONS AS WELL AS FOR EASE OF USE.   

WORKS AS PART OF THE VIRGINIA DEPARTMENT OF HEALTH, OFFICE OF INFORMATION MANAGEMENT (VDH) TO WORK ON THE MODIFICATIONS TO THE INFORMATION SECURITY PORTAL. IN ADDITION, MAY ALSO WORK ON OTHER SIMILAR SYSTEMS TO ADDRESS ANY AUDIT RELATED ISSUES.

SPECIFIC TASK(S): 

1 – ENHANCE THE CERTIFICATION/REPORTING TO INCLUDE

A – CALENDAR REMINDER TO ALL CERTIFICATION ROLES PRIOR TO THE DEADLINE, AND THEN A FEW DAYS AFTER THE DEADLINE (FOR THOSE THAT HAVE NOT COMPLETED THE CERTIFICATION) TO COMPLETE THEIR MONTHLY CERTIFICATION OF ACCESSES AND ANNUAL CERTIFICATION OF SECURITY AWARENESS TRAINING.

B – AUTO GENERATED REPORT THAT IS ONLINE SHOWING (YES/NO) STATUS OF OFFICE/DISTRICT FOR THEIR CERTIFICATIONS (NOT SHOWING SYSTEMS, JUST WHETHER THEY HAVE COMPLETED CERTIFICATION FOR THAT MONTH).

2 – INCORPORATE ADDITIONAL ROLES SET IN SYSTEM TO ALLOW AUDIT/REPORTING (TO BE USED BY INTERNAL AUDIT, OPERATIONS DIRECTORS, ETC. FOR ACCOUNT CERTIFICATION TRACKING).  

/* THE 2 REQUIREMENTS BELOW WILL BE ADDRESSED IF THE FUNDING IS AVAILABLE AND THERE IS TIME */

3 – USER ACCOUNT TRACKING MODULE THAT CAN BE POPULATED BY MANAGERS AND USED WHEN HR ACTIONS FOR INDIVIDUAL STAFF OCCUR.  OUTPUT GENERATING A REPORT OF KNOWN SYSTEMS THAT THE USER HAS HAD AN ACCOUNT WHILE AT THE AGENCY.  

A – FIRST EFFORT TO PROVIDE A CONSOLIDATED SYSTEM TO COMPLETE REQUEST FORMS FOR VDH CRITICAL SYSTEM (THUS TRACKING USERS WITH ACCOUNTS) AND ACCOUNT STATUS.  FURTHER ALLOWING THE BUSINESS MANAGER TO GENERATE REPORTS UPON SEPARATION/TRANSFER AND REQUEST ACCOUNT DELETION. THE NEXT STEP FOR MANAGER IS TO COMPLETE REQUISITE FORMS FOR DE PROVISION.

B – PHASED EFFORT THAT MAY INCLUDE THE ABILITY TO TRACK ACCOUNT DOCUMENTS AND CERTIFICATIONS AS PART OF THE SYSTEM.

4 – SYSTEM INVENTORY MODULE THAT CAN BE USED TO TRACK IT SYSTEMS, SYSTEM OWNERS, AND KEY DOCUMENT/DATES WITHIN THE SYSTEM FOR SECURITY COMPLIANCE REQUIREMENTS.