Laserfiche WebLink
Attachment 1 <br />Confidential Information Security Requirements <br />DEFINITIONS <br />In addition to the definitions set out in Section 2 of this Contract K5885 for Medication for Opioid <br />Use Disorder (MOUD) in Jails Program, the definitions below apply to this Attachment. <br />"Hardened Password" means a string of characters containing at least three of the following <br />character classes: upper case letters; lower case letters; numerals; and special characters, <br />such as an asterisk, ampersand or exclamation point. <br />Passwords for external authentication must be a minimum of 10 characters long. <br />Passwords for internal authentication must be a minimum of 8 characters long. <br />iii. Passwords used for system service or service accounts must be a minimum of 20 <br />characters long. <br />b. "Portable/Removable Media" means any Data storage device that can be detached or <br />removed from a computer and transported, including but not limited to: optical media (e.g., <br />CDs, DVDs); USB drives; or flash media (e.g., CompactFlash, SD, MMC). <br />c. "Portable/Removable Devices" means any small computing device that can be transported, <br />including but not limited to: handhelds/PDAs/Smartphones; Ultramobile PC's, flash memory <br />devices (e.g., USB flash drives, personal media players); and laptops/notebook/tablet <br />computers. If used to store Confidential Information, devices should be Federal Information <br />Processing Standards (FIPS) Level 2 compliant. <br />d. "Secured Area" means an area to which only Authorized Users have access. Secured Areas <br />may include buildings, rooms, or locked storage containers (such as a filing cabinet) within a <br />room, as long as access to the Confidential Information is not available to unauthorized <br />personnel. <br />e. "Transmitting" means the transferring of data electronically, such as via email, SFTP, <br />webservices, AWS Snowball, etc. <br />f. "Trusted System(s)" means the following methods of physical delivery: (1) hand -delivery by a <br />person authorized to have access to the Confidential Information with written <br />acknowledgement of receipt; (2) United States Postal Service ("USPS") first class mail, or <br />USPS delivery services that include Tracking, such as Certified Mail, Express Mail or <br />Registered Mail; (3) commercial delivery services (e.g. FedEx, UPS, DHL) which offer <br />tracking and receipt confirmation; and (4) the Washington State Campus mail system. For <br />electronic transmission, the Washington State Governmental Network (SGN) is a Trusted <br />System for communications within that Network. <br />Washington State 29 Description of Services <br />Health Care Authority HCA Contract #K5885 <br />