Social security number presented that is the same as one given by another student or employee. Suspicious Covered Account Activity or Unusual Use of Accounts Unusual use of, or suspicious activity related to, a University covered account; Unusual requests to make changes to account information; Request for new or replacement card, or addition of authorized account users shortly following change of address notice; Attempts to redirect refund monies from destination identified in the system of record; Notice to the University that a student or employee is not receiving mail sent by the University; Mail is returned repeatedly as undeliverable although transactions continue to be conducted; Notice to the University that an account has unauthorized activity; Breach in the computer system security; and University’s Unauthorized access to or use of student or employee account information. Alerts from Others Notice to the University from a student, employee, service provider, identity theft victim, law enforcement authority, or other person regarding an actual or probable identity theft in connection with University covered accounts. Mitigating Identity Theft: The Program will implement the following procedures designed to assist University personnel in identifying and detecting red flags relevant to opening, accessing or maintaining a covered account in an effort to prevent and mitigate identity theft: Obtain and verify the identity of student/staff prior to opening a covered account – require certain identifying information (name, birth date, academic records, home address, etc.) and check for inconsistent or incomplete information; Verify the student/staff identity at the time an identification card is issued; Authenticate student/staff when making changes to an existing covered account; Verify the validity of a change of address encourage students and staff to make changes – of address through the appropriate methods if requested in person, require picture – identification; Monitor transactions for possible red flags; Ensure paper documents associated with or containing covered account information and personally identifiable information on students and staff are maintained in a secure environment and shredded when retention requirements or the business need expire; Ensure electronic files containing covered account information and personally identifiable information are secured in accordance with University information security requirements, that access to such files is limited to those who need access to perform their job duties, and that such files and records within them are securely destroyed when retention requirements or the business need expire;
Social security number presented that is the same as one given by another student or employee. Suspicious Covered Account Activity or Unusual Use of Accounts Unusual use of, or suspicious activity related to, a University covered account; Unusual requests to make changes to account information; Request for new or replacement card, or addition of authorized account users shortly following change of address notice; Attempts to redirect refund monies from destination identified in the system of record; Notice to the University that a student or employee is not receiving mail sent by the University; Mail is returned repeatedly as undeliverable although transactions continue to be conducted; Notice to the University that an account has unauthorized activity; Breach in the University’s computer system security; and Unauthorized access to or use of student or employee account information. Alerts from Others Notice to the University from a student, employee, service provider, identity theft victim, law enforcement authority, or other person regarding an actual or probable identity theft in connection with University covered accounts. Mitigating Identity Theft: The Program will implement the following procedures designed to assist University personnel in identifying and detecting red flags relevant to opening, accessing or maintaining a covered account in an effort to prevent and mitigate identity theft: Obtain and verify the identity of student/staff prior to opening a covered account – require certain identifying information (name, birth date, academic records, home address, etc.) and check for inconsistent or incomplete information; Verify the student/staff identity at the time an identification card is issued; Authenticate student/staff when making changes to an existing covered account; Verify the validity of a change of address – encourage students and staff to make changes of address through the appropriate methods – if requested in person, require picture identification; Monitor transactions for possible red flags; Ensure paper documents associated with or containing covered account information and personally identifiable information on students and staff are maintained in a secure environment and shredded when retention requirements or the business need expire; Ensure electronic files containing covered account information and personally identifiable information are secured in accordance with University information security requirements, that access to such files is limited to those who need access to perform their job duties, and that such files and records within them are securely destroyed when retention requirements or the business need expire;