i-ACT program agreement - Laserfiche WebLink

Home Browse Search

7 j. lf the Contract specifically allows for the storage of Confidential lnformation on a Mobile Device, passcodes used on the device must: (1). Be a minimum of six (6) alphanumeric characters; (2). Contain at least three unique character classes (upper case, lower case, letter, number); and (3). Not contain more than a three consecutive character run. Passcodes consisting of (12345, or abcd12 would not be acceptable). k. Render the device unusable after a maximum of five (5) failed logon attempts. Protection of Data. The Contractor agrees to store Data on one or more of the following media and protect the Data as described: Hard disk drives. For Data stored on localworkstation hard disks, access to the Data will be restricted to Authorized User(s) by requiring logon to the local workstation using a Unique User lD and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Network server disks. For Data stored on hard disks mounted on network seryers and made available through shared folders, access to the Data will be restricted to Authorized Users through the use of access control lists which will grant access only after the Authorized User has authenticated to the network using a Unique User lD and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smartcards. Data on disks mounted to such servers must be located in an area which is accessible onlyto authorized personnel, with access controlled through use of a key, card key, combination lock, brcomparable mechanism. a b c. Optical discs (CDs or DVDs) in localworkstation optical disc drives. Data provided by DCyFon optical discs which will be used in local workstation optical disc drives and which will noi betranspoded out of a Secure Area. When not in use for the contracted purpose, such discs must beStored in a Secure Area, Workstations which access Data on optical discs must be located in anarea which is accessible only to authorized personnel, with access controlled through use of a key,card key, combination lock, or comparable mechanism. d. Optical discs (CDs or DVDs) in drives or jukeboxes attached to servers. Data provided byDCYF on optical discs which will be attached to network servers and which will not be transportedout of a Secure Area. Access to Data on these discs will be restricted to Authorized Users ifrrougfrthe use of access control lists which will grant access only after the Authorized User hasauthenticated to the network using a Unique User lD and Hardened password or otherauthentication mechanisms which provide equal or greater security, such as biometrics or smartcards' Dataondiscsattachedtosuchserversmus[belocatedinLnareawhichisaccessibleonly to authorized personnel, with access controlled through use of a key, card key, combination lock, orcomparable mechanism. e. Paper documents. (1)' All paper documents must be protected by storing the records in a secure Area, with accesscontrolled through use of a key, card key, combinatio-n lock, or "orp"r"oru mechanism, uno *ni.r,is only accessible to authorized personnel. (2)'when being transported outside of a Secure Area, paper documents must be under the physicalcontrol of contractor staff with authorization to access the Data.Department of Children, youth & Families 2017CF County Program Agreement 6-24-20 page .i3