Laserfiche WebLink
Exhibit A <br />(f) Taking frequent inventories <br />(2) When being transported outside of a Secured Area, portable devices and media with DSHS <br />Confidential Information must be under the physical control of Contractor staff with authorization <br />to access the Data. <br />(3) Portable devices include, but are not limited to; smart phones, tablets, flash memory devices <br />(e.g. USB flash drives, personal media players), portable hard disks, and <br />laptop/notebook/netbook computers if those computers may be transported outside of a <br />Secured Area. <br />(4) Portable media includes, but is not limited to; optical media (e.g. CDs, DVDs), magnetic media <br />(e.g. floppy disks, tape), or flash media (e.g. CompactFlash, SD, MMC). <br />h. Data stored for backup purposes. <br />(1) DSHS data may be stored on portable media as part of a Contractor's existing, documented <br />backup process for business continuity or disaster recovery purposes. Such storage is <br />authorized until such time as that media would be reused during the course of normal backup <br />operations. If backup media is retired while DSHS Confidential Information still exists upon it, <br />such media will be destroyed at that time in accordance with the disposition requirements in <br />Section 5. Data Disposition <br />(2) DSHS Data may be stored on non-portable media (e.g. Storage Area Network drives, virtual <br />media, etc.) as part of a Contractor's existing, documented backup process for business <br />continuity or disaster recovery purposes. If so, such media will be protected as otherwise <br />described in this exhibit. If this media is retired while DSHS Confidential Information still exists <br />upon it, the data will be destroyed at that time in accordance with the disposition requirements in <br />Section 5. Data Disposition. <br />4. Data Segregation <br />a. DSHS Data must be segregated or otherwise distinguishable from non-DSHS data. This is to <br />ensure that when no longer needed by the Contractor, all DSHS Data can be identified for return or <br />destruction. It also aids in determining whether DSHS Data has or may have been compromised in <br />the event of a security breach. As such, one or more of the following methods will be used for data <br />segregation. <br />b. DSHS Data will be kept on media (e.g. hard disk, optical disc, tape, etc.) which will contain no <br />non-DSHS data. And/or, <br />c. DSHS Data will be stored in a logical container on electronic media, such as a partition or folder <br />dedicated to DSHS Data. And/or, <br />d. DSHS Data will be stored in a database which will contain no non-DSHS data. And/or, <br />e. DSHS Data will be stored within a database and will be distinguishable from non-DSHS data by the <br />value of a specific field or fields within database records. <br />f. When stored as physical paper documents, DSHS Data will be physically segregated from non- <br />DSHS data in a drawer, folder, or other container. <br />DSHS Central Contract Services Page 18 <br />1769CS County Agreement 6-15-2017 <br />