i-ACT agreement - Laserfiche WebLink

Home Browse Search

Specia! Terms and Conditions (4). Paper documents will be retained in a Secure Area, per the state of Washington records retention requirements. f. Data storage on portable devices or media (1). Except where otheruvise specified herein, Data shall not be stored by the Contractoron portable devices or media unless specifically authorized within the terms and conditions of the Contract. lf so authorized, the Data shall be given the following protections: (a). Encrypt the Data; and (b). Control access to devices with a Unique User lD and Hardened Password or stronger authentication method such as a physical token or biometrics; and (c). Manually lock devices whenever they are lefi unattended and set devices to lock automatically after a period of inactivity, if this feature is available, Maximum period of inactivity is fifteen (15) minutes; and (d). Apply administrative and physical security controls to Portable Devices and Portable Media by: i. Keeping them in a Secure Area when not in use; ii. Using check-in/check-out procedures when they are shared; and iii. Taking quarterly inventories (2).When being transporled outside of a Secure Area, Portable Devices and Portable Media with Data must be underthe physical controlof Contractorstaffwith authorization to access the Data, even if the Data is encrypted. Portable Devices and Portable Media will not be secured or stored within motor vehicles at any time the staff member is away from the motor vehicle. g. Data stored for backup purposes (1) DCYF Confidential lnformation may be stored on Portable Media as part of a Contractor's existing, documented backup process for business continuity or disaster recovery purposes. Such storage is authorized until such time as that media would be reused during the course of normal backup operations. lf backup media is retired while DCYF Confidential lnformation still exists upon it, referto Section 12Dala Disposition. (2) Dala may be stored on non-portable media (e.g. Storage Area Network drives, virtualmedia, etc.) as part of a Contractor's existing, documented backup process for business continuity or disaster recovery purposes. lf so, such media will be protected as otherwise described ln itris exhibit. lf this media is retired while DCYF Confidential lnformation still exists upon it, referto Section 12 Dala Disposition. h. Cloud storage. Data requires protections equalto orgreaterthan those specified elsewherewithin this exhibit. Cloud storage of Data is problematic as neither DCYF nor the Contractor has control of the environment in which the Data is stored. For this reason: (1).Data will not be stored in any consumergrade Cloud solution, unless all of the following conditions are met: Department of Children, Youth I Families 2017CF County Program Agreement 624-20 Page 13