Laserfiche WebLink
Do.u$i0n Erivelope tn: 2A:301 1 l-fl3A7-r;837-9449-41 :6llA?ACCD{ <br />$pecial Ternrs and eonditions <br />(1). Data will not [:e stored in any consumer grade Cloud solutiorr, unless all of the following <br />conditions are met: <br />{a). Contractor ha$ vrritten procedures in plaee governlng use of the Cloud storage and <br />Contractor attests in writirrg that all such procedures will be unifornrly follawed; <br />{b). The Data will be Encrypted while within the Contractor network; <br />(c). The Data vvill renrain Encrypted during lransmission to the Cloud; <br />(d),The Data will renrain Encrypted at all times while residirrg wrthin the Cloud storage solution; <br />(e).The Contrsctorwilf possess a decrypiion keyforthe Data, *nd the clecryption keywill be <br />possessed only by the Contractor and/or DCYF; <br />(f). The Data will not be downloadeci to non-alrthorized systems, meaning syslems that are not <br />r:n either lfie DCYF or Contraetor neiworks; <br />{g}.The Data vuill not be decrypied until clownloacled onto a cornputer or pcrtable dsvise within <br />the control of an Autlrorized User and witlrin either the DCYF or Contractor's network; ancl <br />(h).Access to ihe cloud stcrage requires iVlulti Factor Authentication or Two $lep Authentication. <br />(2). Data lvill trot be stored on an Enterprise Cloud slorage solution unless either: <br />(a) The Cloud storage provider is treaied as any other $ub-Contractor, and agrees in writing to <br />all of the reqr.rirements rrrithin this exlribit; or <br />{b} The Clcud si.orage soluiion used is FedRAMp ceflified, <br />(3) lf the Data includes protected health infornration coversd by ihe Health lnsurance Portability anci <br />Accountability Act (HIPAA), the Cloucl provider must sign a Business Associate Agreemenl prior <br />to Data being siored in their Cloud solution. <br />Method of Transfer. <br />a. Alf Data transfer$ to or frorl the Contractor shall only be made by using ihe secure clata.wa.gov <br />porlal provided by the state of Washinglon with login and hardened passworcisecuriiy. <br />b, The Contractor shall use an encrypted ernail account for electrcnic submissions which contain <br />Confidential, and Personal lrtformation, a$ defined in the General Terms and Conditiarrs. <br />lnforrlalion regarding encrypted ernaitaccounts can be obtained at DCYF's v,ehrsi{e, locatecJ at <br />I[tif-iAUt*X,..S*,1!-*i":i;,-t:,*.!|"cS"1yjq*-ei+"frjl,ol::,r"e;iiiji_*:L:.1*tl1d*rj_"ri..;tJ-ttni i]1,: {.t,Ljtli: ji. <br />$ystern protection. To prevent compromise of sy:tems whiclr contain DCYF Data or through urhich <br />ihat Data passes. <br />a" $ystems containing Data trrust have all secr"rrity patches or hotfixes applied within three i3) months <br />of being nrade available; <br />b. The Conlractor will have a method of ensuring that the requisite patches and hotfixes have been <br />applied within ihe required tinreframes; <br />c. Systems containing Data shall lrave an Anti-Malware application, if availabfe, installed; and <br />Doplrdrflrnt of Chilrjten, Yoldl'r & Fanrilies <br />30i 7CF County P|ograrn Agteenlefit (8..'l-:C1S) pasc 13 <br />I <br />g.