Laserfiche WebLink
c. Optical discs (CDs or DVDs) in local workstation optical disc drives. <br />Data provided by DSHS on optical discs which will be used in local <br />workstation optical disc drives and which will not be transported out of a <br />Secured Area. When not in use for the contracted purpose, such discs must <br />be locked in a drawer, cabinet or other container to which only Authorized <br />Users have the key, combination or mechanism required to access the <br />contents of the container. Workstations which access DSHS Data on optical <br />discs must be located in an area which is accessible only to authorized <br />personnel, with access controlled through use of a key, card key, combination <br />lock, or comparable mechanism. <br />d. Optical discs (CDs or DVDs) in drives or jukeboxes attached to servers. <br />Data provided by DSHS on optical discs which will be attached to network <br />servers and which will not be transported out of a Secured Area. Access to <br />Data on these discs will be restricted to Authorized Users through the use of <br />access control lists which will grant access only after the Authorized User has <br />authenticated to the network using a Unique User ID and Hardened Password <br />or other authentication mechanisms which provide equal or greater security, <br />such as biometrics or smart cards. Data on discs attached to such servers <br />must be located in an area which is accessible only to authorized personnel, <br />with access controlled through use of a key, card key, combination lock, or <br />comparable mechanism. <br />e. Paper documents. Any paper records must be protected by storing the <br />records in a Secured Area which is only accessible to authorized personnel. <br />When not in use, such records must be stored in a locked container, such as <br />a file cabinet, locking drawer, or safe, to which only authorized persons have <br />access. <br />Remote Access. Access to and use of the Data over the State <br />Governmental Network (SGN) or Secure Access Washington (SAW) will be <br />controlled by DSHS staff who will issue authentication credentials (e.g. a <br />Unique User ID and Hardened Password) to Authorized Users on Contractor <br />staff. Contractor will notify DSHS staff immediately whenever an Authorized <br />User in possession of such credentials is terminated or otherwise leaves the <br />employ of the Contractor, and whenever an Authorized User's duties change <br />such that the Authorized User no longer requires access to perform work for <br />this Contract. <br />g. Data storage on portable devices or media. <br />(1) Except where otherwise specified herein, DSHS Data shall not be stored <br />by the Contractor on portable devices or media unless specifically <br />authorized within the terms and conditions of the Contract. If so <br />authorized, the Data shall be given the following protections: <br />Professional Services Agreement <br />Page 31 <br />