Identity theft prevention program

VCU's identity theft prevention program is designed to detect, prevent, and mitigate identity theft in connection with new and existing covered accounts in order to protect the personal information entrusted to the university.

This is accomplished by taking steps to mitigate identity theft, as well as by identifying, detecting and responding to relevant warning signs of identity theft (red flags).

Who should read the Identity Theft Prevention policy?

All faculty and staff should read the Identity Theft Prevention policy. The policy describes the purpose of the program, program components and program administration.

What are covered accounts?

A covered account is an account that involves multiple payments or transactions and has a foreseeable risk of identity theft. Identified covered accounts are described in the Identity Theft Prevention policy.

What are some examples of red flags?

1. Notifications from credit reporting agencies
2. Suspicious documents
3. Suspicious personal identifying information
4. Suspicious account activity
5. Alerts from others

What should be done if red flags are detected?

One or more of the following steps should be taken.

1. Change passwords or disable account access
2. Investigate suspicious transactions
3. Close the covered account
4. Reopen the covered account with a new account number
5. Do not open a new covered account
6. Notify the Program Administrator
7. Notify law enforcement
8. Make a determination that no action is warranted

Who is the Program Administrator?

The Program Administrator is the VCU Information Security Officer, Steve Werby.