Laserfiche WebLink
this exhibit. If this media is retired while DSHS Confidential Information <br />still exists upon it, the data will be destroyed at that time in accordance <br />with the disposition requirements in Section 5. Data Disposition. <br />4. Data Segregation. <br />a. DSHS Data must be segregated or otherwise distinguishable from non-DSHS <br />data. This is to ensure that when no longer needed by the Contractor, all <br />DSHS Data can be identified for return or destruction. It also aids in <br />determining whether DSHS Data has or may have been compromised in the <br />event of a security breach. As such, one or more of the following methods <br />will be used for data segregation. <br />b. DSHS Data will be kept on media (e.g. hard disk, optical disc, tape, etc.) <br />which will contain no non-DSHS data. And/or, <br />c. DSHS Data will be stored in a logical container on electronic media, such as a <br />partition or folder dedicated to DSHS Data. And/or, <br />d. DSHS Data will be stored in a database which will contain no non-DSHS <br />data. And/or, <br />e. DSHS Data will be stored within a database and will be distinguishable from <br />non-DSHS data by the value of a specific field or fields within database <br />records. <br />f. When stored as physical paper documents, DSHS Data will be physically <br />segregated from non-DSHS data in a drawer, folder, or other container. <br />g. When it is not feasible or practical to segregate DSHS Data from non-DSHS <br />data, then both the DSHS Data and the non-DSHS data with which it is <br />commingled must be protected as described in this exhibit. <br />5. Data Disposition. When the contracted work has been completed or when no <br />longer needed, except as noted in Section 3. Protection of Data b. Network <br />Server Disks above, Data shall be returned to DSHS or destroyed. Media on <br />which Data may be stored and associated acceptable methods of destruction are <br />as follows: <br />Data stored on: <br />Server or workstation hard disks, or <br />Removable media (e.g. floppies, USB <br />flash drives, portable hard disks) excluding <br />Professional Services Agreement <br />Page 32 <br />Will be destroyed by: <br />Using a "wipe" utility which will overwrite <br />the Data at least three (3) times using <br />either random or single character data, or