The following is a sample EEO Policy for an organization. The EEO policy must be written on official company letterhead, signed by the appointed EEO Officer, and posted in the office and at all job sites.
Equal Employment Opportunity Policy Number ___
To state the commitment of the system to Equal Employment Opportunity.
1. The XYZ Company is an equal opportunity employer. No person is unlawfully excluded from consideration for employment because of race, color, religious creed, national origin, ancestry, sex, age, veteran status, martial status or physical challenges.
2. The policy applies not only to recruitment and hiring practices, but also includes affirmative action in the area of placement, promotion, transfer, rate of pay and termination.
3. Executive, management and supervisory levels have the responsibility to further the implementation of this policy and ensure conformance by subordinates.
4. Any XYZ Company employee who engages in discrimination will be subject to suspension or termination.
5. Any supervisory or managerial employee who knows of such behavior and fails to take immediate and appropriate corrective action will also be subject to disciplinary action.
6. Any individual who is the target of discrimination is encouraged to discuss the matter with the Department Director.
7. Any individual who feels such a discussion would be or has been futile, unsatisfactory or counterproductive should contact the Human Resources Department.
8. A member of the Human Resource staff will be designated to investigate the claim.
9. The accused individual may be suspended pending the outcome of the investigation.
10. Retaliation against claimants will not be tolerated.
XYZ Company is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities to you and all other persons without regard to race, creed, color, religion, national origin, sex, marital status, citizenship status, age, veteran status or disability.
Furthermore, we will not tolerate any form of discrimination or harassment of our employees by co-workers, supervisors, customers, or vendors. This commitment extends to our policies on recruiting, advertising, hiring, placement, promotion, training, transfer, wages, benefits, termination and all other privileges, terms and conditions of employment.
Disaster Backup and Recovery Plan
Policies and Procedures should include a Disaster Backup and Recovery plan to ensure the business can continue operations in the event of a disaster. This includes keeping the business running, recovering lost data, testing of backup procedures and replacement of equipment.
Policies and procedures should be implemented to include incident response. This information should be used to identify security incidents and how to respond. The security officer for the organization along with management should evaluate the effects of any incidents. Documentation of any incidents should be made along with the outcomes for the possible modification of the policies to prevent any further incidents.
Training of Workforce
Organizations should provide a training program to raise awareness of HIPAA rights. Every individual in the organization must be trained on a regular basis. Training should be provided to include employee awareness, password safeguarding and changing, workstation access, software use, virus and malware information and other mission critical operations.
Records and Information Access
Policies should define roles on who can have what access to programs and information. These policies should further define the roles in information technology of the IT personnel who have the rights to modify the access.
Audit mechanisms should be in place for all hardware, software and data control.