Final Contract - Laserfiche WebLink

Home Browse Search

j. If the Contract specifically allows for the storage of Confidential Information on a Mobile Device, passcodes used on the device must: (1). Be a minimum of six (6) alphanumeric characters; (2). Contain at least three unique character classes (upper case, lower case, letter, number); and (3). Not contain more than a three consecutive character run. Passcodes consisting of (12345, or abcd12 would not be acceptable). k. Render the device unusable after a maximum of five (5) failed logon attempts. Protection of Data. The Contractor agrees to store Data on one or more of the following media and protect the Data as described: a. Hard disk drives. For Data stored on local workstation hard disks, access to the Data will be restricted to Authorized User(s) by requiring logon to the local workstation using a Unique User ID and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. b. Network server disks. For Data stored on hard disks mounted on network servers and made available through shared folders, access to the Data will be restricted to Authorized Users through the use of access control lists which will grant access only after the Authorized User has authenticated to the network using a Unique User ID and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Data on disks mounted to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. c. Optical discs (CDs or DVDs) in local workstation optical disc drives. Data provided by DCYF on optical discs which will be used in local workstation optical disc drives and which will not be transported out of a Secure Area. When not in use for the contracted purpose, such discs must be Stored in a Secure Area. Workstations which access Data on optical discs must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. Optical discs (CDs or DVDs) in drives orjukeboxes attached to servers. Data provided by DCYF on optical discs which will be attached to network servers and which will not be transported out of a Secure Area. Access to Data on these discs will be restricted to Authorized Users through the use of access control lists which will grant access only after the Authorized User has authenticated to the network using a Unique User ID and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Data on discs attached to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. e. Paper documents. (1). All paper documents must be protected by storing the records in a Secure Area, with access controlled through use of a key, card key, combination lock, or comparable mechanism, and which is only accessible to authorized personnel. (2). When being transported outside of a Secure Area, paper documents must be under the physical control of Contractor staff with authorization to access the Data. Department of Children. Youth & Families 2017CF County Program Agreement 6-24-20 Page 13