|
n. "Portable Media" means any machine readable media that may routinely be stored or moved
<br />independently of computing devices. Examples include magnetic tapes, optical discs (CDs or
<br />DVDs), flash memory (thumb drive) devices, external hard drives, and internal hard drives that have
<br />been removed from a computing device.
<br />o. "Physically Secure" means that access is restricted through physical means to authorized
<br />individuals only.
<br />p. "Secure Area" means an area to which only authorized representatives of the entity possessing the
<br />Confidential lnformation have access, and access is controlled through use of a key, card key,
<br />combination lock, or comparable mechanism. Secure Areas may include buildings, rooms or
<br />locked storage containers (such as a filing cabinet or desk drawer) within a room, as long as access
<br />to the Confidential lnformation is not available to unauthorized personnel. ln otheruuise Secure
<br />Areas, such as an office with restricted access, the Data must be secured in such a way as to
<br />prevent access by non-authorized staff such as janitorial or facility security staff, when authorized
<br />Contractor staff are not present to ensure that non-authorized staff cannot access it.
<br />q. "Sensitive Personal lnformation" means personally identifying information including, but not limited
<br />to: names, addresses, health information, GPS [Global Positioning System] coordinates, telephone
<br />numbers, email addresses, social security numbers, driver's license numbers, or other personally
<br />identifying information, and any financial identifiers.
<br />r. "Staff' means the Contractor's directors, officers, employees, and agents who provide goods or
<br />services pursuant to this Contract. "Staffl' also means Subcontractors' directors, officeri,
<br />employees, and agents who provide goods or services on behalf of the Contractor. The term ,,Staff,
<br />also means the Subcontractors'directors, officers, employees, and agents who provide goods or
<br />services on behalf of the Subcontractor and Contractor.
<br />s' Trusted Network" means a network operated and maintained by the Contractor, which includes
<br />security controls sufficient to protect DCYF Data on that network. Controls would include a firewallbetween any other networks, access control lists on networking devices such as routers andswitches, and other such mechanisms which protect the confidlntiality, integrity, and availability ofthe Data.
<br />t. "Unique User lD" means a string of characters that identifies a specific user and which, inconjunction with a password, passphrase or other mechanism, authenticates a user to aninformation system.
<br />Authority' The security requirements described in this document reflect the applicable requirements ofstandard 141.10 (hltu*l:/"q"CI-?w_a*g9,yJpsXs*lps) of the office of the chief lnformaiion officer for the Stateof Washington, and of the DCYF lnformation Security Policy and Standards Manual.
<br />2.
<br />3
<br />4
<br />Scope of Protection. Applies to Confidential Information, Data, category 4 Data, sensitive personal
<br />lnformation, and Materials related tothe subject matterotirris Contracitnat is delivered, received,used, shared, acquired, created, developed, revised, modified, or amended by DCyF, the Contractor,or Subcontractors.
<br />compliance with Laws, Rules, Regulations, and Policies. For Confidential lnformation, Data,Category 4 Data, sensitive Personailnformation, and Materials that is delivered, received, used,shared, acquired, created, developed, revised, modified, oi amenoeo in connectlon with this Contractthe parties shall comply with the following:
<br />Department of Children, youth & Families
<br />2017CF County program Agreement 6_24_20
<br />Page 10
|