Admatch K4649 Amendment 1 - Laserfiche WebLink

Home Browse Search

DocuSign Envelope ID: 262ABAl8-5354-4F41-9508-91313C8ACBA6D Attachment 1 Confidential Information Security Requirements 1. Definitions In addition to the definitions set out in Section 1, Definitions, of this Contract for Medicaid Administrative Claiming (MAC) Services, the definitions below apply to this attachment. a. "Hardened Password" means a string of characters containing at least three of the following character classes: upper case letters; lower case letters; numerals; and special characters, such as an asterisk, ampersand or exclamation point. Passwords for external authentication must be a minimum of ten (10) characters long. Passwords for internal authentication must be a minimum of eight (8) characters long. iii. Passwords used for system service or service accounts must be a minimum of twenty (20) characters long. b. "Portable/Removable Media" means any Data storage device that can be detached or removed from a computer and transported, including but not limited to: optical media (e.g. CDs, DVDs); USB drives; or flash media (e.g. CompactFlash, SD, MMC). c. "Portable/Removable Devices" means any small computing device that can be transported, including but not limited to: handhelds/PDAs/Smartphones; Ultramobile PC's, flash memory devices (e.g. USB flash drives, personal media players); and laptops/notebook/tablet computers. If used to store Confidential Information, devices should be Federal Information Processing Standards (FIPS) Level 2 compliant. d. "Secured Area" means an area to which only Authorized Users have access. Secured Areas may include buildings, rooms, or locked storage containers (such as a filing cabinet) within a room, as long as access to the Confidential Information is not available to unauthorized personnel. e. "Transmitting" means the transferring of data electronically, such as via email, SFTP, webservices, AWS Snowball, etc. f. "Trusted System(s)" means the following methods of physical delivery: (1) hand - delivery by a person authorized to have access to the Confidential Information with written acknowledgement of receipt; (2) United States Postal Service ("USPS") first class mail, or USPS delivery services that include Tracking, such as Certified Mail, Express Mail or Registered Mail; (3) commercial delivery services (e.g. FedEx, UPS, DHL) which offer tracking and receipt confirmation; and (4) the Washington State Campus mail system. For electronic transmission, the Washington State Washington State Page 22 of 53 HCA IAA K4649 Health Care Authority Revised 10/2020