[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-143460-105":59,"doc-detail-143460-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","city-of-cambridge-written-information-security-policy-wisp-personal-information-protection-rules","City of Cambridge Written Information Security Policy (WISP) - Personal Information Protection Rules","","City of Cambridge Written Information Security Policy (WISP) establishes administrative, physical, and technical safeguards to protect Personal Information (PI), also known as personally identifiable information (PII). The policy applies to PI obtained by the City and to records held or managed through electronic and paper systems. It defines PI using specific data elements such as SSNs, driver’s license or state ID numbers, and financial account or card numbers. WISP assigns responsibility to designated coordinators, sets employee acknowledgment and training requirements, and clarifies oversight and compliance. Public Safety must also follow CJIS Security Policy when applicable.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/city-of-cambridge-written-information-security-policy-wisp-personal-information-protection-rules/143460/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/city-of-cambridge-written-information-security-policy-wisp-personal-information-protection-rules/143460.png","ImageObject",300,407,{"name":92,"@type":93},"River Wang","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-30","2026-08-25",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",16,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"What is the purpose of the City of Cambridge WISP?","Question",{"text":113,"@type":114},"The policy establishes safeguards to protect Personal Information, maintain confidentiality and integrity, and reduce risks such as unauthorized access, identity theft, and fraud.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"How does the WISP define Personal Information (PI)?",{"text":118,"@type":114},"PI includes a resident’s name (or initials plus last name) combined with specific data elements such as SSNs, driver’s license/state ID numbers, or financial account/card numbers that allow access with security credentials.",{"name":120,"@type":111,"acceptedAnswer":121},"Which departments and providers must comply, and how are conflicts handled?",{"text":122,"@type":114},"City employees handling PI must acknowledge and review the policy. Public Safety departments must also follow the DOJ CJIS Security Policy; if there is a conflict, CJIS prevails for Public Safety operations.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},143460,1787695249,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":140,"language":141,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":67,"update_tm":130,"read_time":145},1099514067438,"https://ap-avatar.wpscdn.com/avatar/100002539ee87300030?x-image-process=image/resize,m_fixed,w_180,h_180&k=1780474512215547542","City of Cambridge Written Information Security Policy (“WISP”)  \nI. Policy Overview and Authorization  \n1. Policy Overview  \nThe City of Cambridge (the “City”) has adopted and continually monitors and enhances a comprehensive Written Information Security Policy (the “WISP” or the “Policy”) in order to develop, introduce and maintain appropriate and effective administrative, physical, and technical safeguards for the protection of Personal Information (“PI”) (defined below), also known as Personally Identifiable Information (“PII”) (collectively hereinafter “PI”) . The WISP is a component of the City’s cybersecurity strategy which also includes a comprehensive, industryrecognized cybersecurity framework intended to safeguard all information deemed sensitive by the federal government, the Commonwealth, and the City, including PI, .  \nThis Policy is intended to safeguard the PI of any Massachusetts resident which the City obtains or which any third party service providers, independent contractors, consultants, and subcontractors and their agents and employees (collectively “Contractors”) of the City obtains on behalf of the City, and to document the City’s policies for collecting, storing, accessing, using, transmitting, and protecting electronic, paper, and other records containing the aforementioned PI in general conformity with the obligations set forth in the regulations promulgated by the Commonwealth’s Office of Consumer Affairs and Business Regulations, 201 CMR 17.00 -Standards for the Protection of Personal Information of Residents of the Commonwealth (the“Regulations”) pursuant to the authority outlined in G. L. c. 93H, § 2. Although the Regulations do not require the City to adopt a WISP (i.e., the definition of person in 201 CMR 17.02 specifically excludes municipalities), the City has deemed it a best practice to adopt a WISP. All City employees who handle PI as defined in this Policy shall be given a copy of this Policy and shall be required to review it and submit an acknowledgement to the Personnel Department, upon commencement of their employment with the City for new employees or prior to handling PI for existing employees, stating that they have reviewed this Policy. Existing employees already handling PI shall have thirty days from the date of issuance of this Policy to submit their acknowledgement to the Personnel Department.  \nThe Cambridge Fire Department, Cambridge Police Department, and the Emergency Communications Department (collectively, “Public Safety”) and any staff in other City departments supporting a Public Safety department’s functions shall, in addition to complying with this Policy, abide by the United States Department of Justice’s “Criminal Justice Information  \nSystem (“CJIS”) Security Policy,” as it may be amended form time to time and any applicable CJIS User Agreement. To the extent there is a conflict between the provisions of this Policy and the CJIS Security Policy, the CJIS Security Policy shall prevail with respect to Public Safety operations.  \nThe School Department shall be governed by the WISP issued by the School Department.  \n2. Personal Information Definition (“PI”)  \nFor purposes of the WISP, Personal Information (“PI”) means a resident of the Commonwealth’s first name and last name, or first initial and last name, in combination with any one or more of the following data elements that relate to such person:  \na) Social Security Number (“SSN”);  \nb) driver’s license number or state-issued identification card number; or  \nc) financial account number, or credit or debit card number, with or without any required security code, access code, personal identification number or password, that would permit access to a person’s financial account.  \nThe definition of PI does not include information that may be obtained from publicly available information, or from federal, state or local government records lawfully made available to the general public.  \n3. Policy Approval  \nThe Policy ha","cbCaijTHqFbgHtk5","https://ap.wps.com/l/cbCaijTHqFbgHtk5","pdf",613737,27,"English","# Policy Overview and Authorization\n## Policy Overview\n## Personal Information Definition (PI)\n## Policy Approval\n# Policy Purpose, Scope and Administration\n## Purpose and Scope\n## WISP Administration\n### Policy Administration\n### Responsibilities of Information Security Policy Coordinator","[{\"question\":\"What is the purpose of the City of Cambridge WISP?\",\"answer\":\"The policy establishes safeguards to protect Personal Information, maintain confidentiality and integrity, and reduce risks such as unauthorized access, identity theft, and fraud.\"},{\"question\":\"How does the WISP define Personal Information (PI)?\",\"answer\":\"PI includes a resident’s name (or initials plus last name) combined with specific data elements such as SSNs, driver’s license/state ID numbers, or financial account/card numbers that allow access with security credentials.\"},{\"question\":\"Which departments and providers must comply, and how are conflicts handled?\",\"answer\":\"City employees handling PI must acknowledge and review the policy. Public Safety departments must also follow the DOJ CJIS Security Policy; if there is a conflict, CJIS prevails for Public Safety operations.\"}]","City of Cambridge Written Information Security Policy (WISP) - Personal Information Protection Rules | PDF",68]