Admatch K4649 Amendment 1 - Laserfiche WebLink

Home Browse Search

DocuSign Envelope ID: 262ABA18-5354-4F41-9508-9613C8ACBA6D 2. Control access to the devices with a Unique User ID and Hardened Password or stronger authentication method such as a physical token or biometrics; 3. Keeping devices in locked storage when not in use; 4. Using check-in/check-out procedures when devices are shared; 5. Maintain an inventory of devices; and 6. Ensure that when being transported outside of a Secured Area, all devices with Data are under the physical control of an Authorized User. b. Paper documents. Any paper records containing Confidential Information must be protected by storing the records in a Secured Area that is accessible only to authorized personnel. When not in use, such records must be stored in a locked container, such as a file cabinet, locking drawer, or safe, to which only authorized persons have access. 4. Confidential Information Segregation HCA Confidential Information received under this Contract must be segregated or otherwise distinguishable from non -HCA data, This is to ensure that when no longer needed by the Contractor, all HCA Confidential Information can be identified for return or destruction. It also aids in determining whether HCA Confidential Information has or may have been compromised in the event of a security Breach. a. The HCA Confidential Information must be kept in one of the following ways: i. On media (e.g. hard disk, optical disc, tape, etc.) which will contain only HCA Data; or ii. In a logical container on electronic media, such as a partition or folder dedicated to HCA's Data; or iii. In a database that will contain only HCA Data; or iv. Within a database and will be distinguishable from non -HCA Data by the value of a specific field or fields within database records; or V. When stored as physical paper documents, physically segregated from non - HCA Data in a drawer, folder, or other container. b. When it is not feasible or practical to segregate HCA Confidential Information from non -HCA data, then both the HCA Confidential Information and the non -HCA data with which it is commingled must be protected as described in this Attachment. Washington State Page 24 of 53 HCA IAA K4649 Health Care Authority Revised 10/2020