OAR 291-005-0035
Termination of Access
(1)
Notice of termination of employment or a transfer to a position not requiring access under these rules shall result in retirement of the individual’s user identification. Prompt notice of termination or transfer shall be sent to the DOC network security officer by the functional unit manager or designee who handles user authorization. This procedure also applies to users from external organizations and Oregon Corrections Enterprises.(2)
Functional unit managers or their designees shall review annually for accuracy a list of users from their respective units. The Information Systems and Services Division (ISSD) shall provide the list.(3)
Managers of external users shall review a list of users annually and confirm those needing continued access. ISSD shall provide the list.(4)
Newly-created user profiles that are not used within three weeks will be disabled.(5)
Owners of existing profiles that are not used for a period of three months will be sent a letter by the DOC network security officer to confirm continued need for access. If there is no response, the profile will be disabled after six months of inactivity.(6)
Passwords that have been disabled for a period of three months will be deleted.
Source:
Rule 291-005-0035 — Termination of Access, https://secure.sos.state.or.us/oard/view.action?ruleNumber=291-005-0035.