Reso 2021-3185 - Laserfiche WebLink

Home Browse Search

Incident Response WEX has an incident response policy, standard, and procedure that is reviewed, approved, and tested yearly. Procedures contain: incident handling, incident detection and analysis, incident categorization, incident analysis, incident documentation, incident prioritization, incident notification, containment, eradication, and recovery, evidence gathering and handling, identifying the attackers, eradication and recovery, and post -incident activity using collected incident data. Subcontractors The WEX Legal Department, in conjunction with Procurement, performs contract review for service providers and has standard legal language in all contracts that address our security requirements and expectations of subcontractors. 7.8 Securing and preventing unauthorized disclosure, misuse, alteration, or destruction of confidential information. WEX employees multiple levels of security with our contractors depending on the level of access they require. WEX prevents unauthorized disclosure, misuse, alteration or destruction of confidential information by utilizing the security protocols and proprietary technological advantages described above for both WEX and our Contractors. See responses in 7.1, 7.5, 7.6, 7.7 and 15.4 for more detail. 7.9 Disaster recovery plan (i.e. data breaches, system errors and resolution plans, timeframe for data restoration, backup in case of power failure, etc.). WEX's Organizational Resilience Program Overview was created to provide clients with information identifying and defining the resiliency roles and responsibilities of WEX and our clients in the event operations are impacted due to disruption or disaster. WEX employs multiple call center locations across the country to ensure a given event in one area or region will not render another in operable. The same goes for WEX's authorizer that validates and approves transactions. Both are on separate power grids and housed in multiple locations across the country. In addition to some of these basic precautions, see our business continuity plan: Overview The WEX Business Continuity Plan includes well—defined and documented procedures, designed to respond to unforeseen events. WEX utilizes a step-by-step, standardized incident management process that ensures all requirements relating to proper response, escalation, notification and resolution of a disruption of any type are met. The WEX BCP utilizes the ISO 22301 framework and is integrated with WEX physical and information security, and risk management systems. The WEX BCP adopts a process approach for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving the organization's organizational resilience management system. Review Policy Oversight of business continuity planning is assigned to the Director, Organizational Resilience who ensures that plan updates are completed and that the plan is tested and remains current and relevant. MASTER AGREEMENT No. 00819 - FLEET CARD SERVICES PAGE 108 OF 138