i-ACT agreement - Laserfiche WebLink

Home Browse Search

7 Department of Children, Youth & Families 2017CF County Program Agreement G2+2O Special Terms and Conditions (1). Be a minimum of six (6) alphanumeric characters; (2). Contain at least three unique character classes (upper case, lower case, letter, number); and (3). Not eontain more than a three consecutive character run. Passcodes consisting of (12345, or abcd12 would not be acceptable). k. Render the device unusable after a maximum of five (5) failed logon attempts. Protection of Data. The Contractor agrees to store Data on one or more of the following media and protect the Data as described: a Hard disk drives. For Data stored on localworkstation hard disks, access to the Data will be restricted to Authorized User(s) by requiring logon to the local workstation using a Unique User lD and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. b. Network server disks. For Data stored on hard disks mounted on network servers and made available through shared folders, access to the Data will be restricted to Authorized Users through the use of access control lists wtrich will grant access only after the Authorized User has authenticated to the network using a Unique User lD and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Data on disks mounted to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. c. Optical discs {CDs or DVDs) in localworkstation optical disc drives. Data provided by DCyF on optical discs wttich will be used in local workstation optical disc drives and which will not be transported out of a Secure Area. When not in use forthe contracted purpose, such discs must be Stored in a Secure Area. Workstations wtrich access Data on optical discs must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. d. Optical discs (CDs or DVDs) in drives or jukeboxes attached to servers. Data provided by DCYF on optical discs which will be attached to network servers and which will not be transported out of a Secure Area. Access to Data on these discs will be restricted to Authorized Users ihrough the use of access control lists which will granl access only after the Authorized User has authenticated to the network using a Unique User lD and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smad cards. Data on discs attached to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, br comparable mechanism. e. Paper documents. (1). All paper documents must be protected by storing the records in a Secure Area, with access controlled through use of a key, card key, combination lock, or comparable mechanism, and which is only accessible to authorized personnel. (2). When being transported outside of a Secure Area, paper documents must be under the physical control of Contractor staff with authorization to access the Data. (3). Paper documents will not be secured or stored in a motor vehiele any time a staff member is away from ihe motor vehicle. Page 12