Laserfiche WebLink
Attachment 1 <br />Confidential Information Security Requirements <br />1. Definitions <br />In addition to the definitions set out in Section 2 of this Agreement K3924 for CPWI <br />Prevention Services, the definitions below apply to this Attachment. <br />a. "Hardened Password" means a string of characters containing at least three of the <br />following character classes: upper case letters; lower case letters; numerals; and <br />special characters, such as an asterisk, ampersand or exclamation point. <br />Passwords for external authentication must be a minimum of 10 characters <br />long. <br />Passwords for internal authentication must be a minimum of 8 characters <br />long. <br />iii. Passwords used for system service or service accounts must be aminimum <br />of 20 characters long. <br />b. "Portable/Removable Media" means any Data storage device that can be detached or <br />removed from a computer and transported, including but not limited to: optical media <br />(e.g. CDs, DVDs); USB drives; or flash media (e.g. CompactFlash, SD, MMC). <br />c. "Portable/Removable Devices" means any small computing device that can be <br />transported, including but not limited to: handhelds/PDAs/Smartphones; Ultramobile <br />PC's, flash memory devices (e.g. USB flash drives, personal media players); and <br />laptops/notebook/tablet computers. If used to store Confidential Information, devices <br />should be Federal Information Processing Standards (FIPS) Level 2 compliant. <br />d. "Secured Area" means an area to which only Authorized Users have access. Secured <br />Areas may include buildings, rooms, or locked storage containers (such as a filing <br />cabinet) within a room, as long as access to the Confidential Information is not <br />available to unauthorized personnel. <br />e. "Transmitting" means the transferring of data electronically, such as via email, SFTP, <br />webservices, AWS Snowball, etc. <br />f. "Trusted System(s)" means the following methods of physical delivery: (1) hand - <br />delivery by a person authorized to have access to the Confidential Information with <br />written acknowledgement of receipt; (2) United States Postal Service ("USPS") first <br />class mail, or USPS delivery services that include Tracking, such as Certified Mail, <br />Express Mail or Registered Mail; (3) commercial delivery services (e.g. FedEx, UPS, <br />Washington State Page 38 HCA Contract No. K3924 <br />Health Care Authority <br />