Res-2022-072 - Laserfiche WebLink

Home Browse Search

Attachment 1 Gonfidential Information Security Requirements 1. DEFINITIONS ln addition to the definitions set out in Section 2 of this Contract K5885 for Medication for Opioid Use Disorder (MOUD) in Jails Program, the definitions below apply to this Attachment. a. "Hardened Password" means a string of characters containing at least three of the following character classes: upper case letters; lower case letters; numerals; and special characters, such as an asterisk, ampersand or exclamation point. i. Passwords for external authentication must be a minimum of 10 characters long ii. Passwords for internal authentication must be a minimum of 8 characters long iii Passwords used for system service or service accounts must be a minimum of 20 characters long. b. "Portable/Removable Media" means any Data storage device that can be detached or removed from a computer and transported, including but not limited to: optical media (e.g., CDs, DVDs); USB drives; orflash media (e.9., CompactFlash, SD, MMC). c. "Portable/Removable Devices" means any small computing device that can be transported, including but not limited to: handhelds/PDAs/Smartphones; Ultramobile PC's, flash memory devices (e.9., USB flash drives, personal media players); and laptops/notebool</tablet computers. lf used to store Confidential lnformation, devices should be Federal lnformation Processing Standards (FIPS) Level 2 compliant. d. "Secured Area" means an area to which only Authorized Users have access. Secured Areas may include buildings, rooms, or locked storage containers (such as a filing cabinet) within a room, as long as access to the Confidential lnformation is not available to unauthorized personnel. e. "Transmitting" means the transferring of data electronically, such as via email, SFTP, webservices, AWS Snowball, etc. f. "Trusted System(s)" means the following methods of physical delivery: (1) hand-delivery by a person authorized to have access to the Confidential lnformation with written acknowledgement of receipt; (2) United States Postal Service (.USPS') first class mail, or USPS delivery services that include Tracking, such as Certified Mail, Express Mail or Registered Mail; (3) commercial delivery services (e.9. FedEx, UPS, DHL) which offer tracking and receipt confirmation; and (4) the Washington State Campus mail system. For electronic transmission, the Washington State Governmental Network (SGN) is a Trusted System for communications within that Network. Washington State Health Care Authority Description of Services HCA Contract #K5885 29