The scope of employee information security responsibility is increasing, becoming essential to sustaining and improving City services—and the preservation of City information resources. This training replaces the “Payment Card Industry (PCI) Security Standards” training for PCI-related roles and facilitates the City’s due care and diligence to meet several regulatory requirements while honoring our custodial information security responsibilities. 

The "General Awareness 2018 + PCI” training is now available through CityLearner. Employees with Payment Card Industry (PCI) roles must complete this training by September 15, 2018—in time to meet the City’s 2018 PCI compliance training requirement. Employees who do not have PCI-related roles must complete this annual training by June 30, 2019. Note, Parks and Recreation employees will continue with bureau-specific PCI training for 2018 and will complete General Awareness by the June 2019 deadline.

This CityLearner training takes about 40 minutes to complete, including a short quiz. Exemptions from this mandatory training can be negotiated through the BHR standard review process.

The City of Portland honors the trust extended to us by our communities and employees to preserve and protect the sensitive information we collect, store, and share. Through information security awareness training the City can ensure shared understanding of and compliance with applicable laws, reduce potential information risks and liability, and reinforce appropriate employee behavior when handling sensitive City information.

For more answers, see the FAQ.