Laserfiche WebLink
DocuSign Envelope ID: 262ABA18-5354-4F41-9508-9B13C8ACBA6D <br />5. Confidential Information Shared with Subcontractors <br />If HCA Confidential Information provided under this Contract is to be shared with a <br />Subcontractor, the contract with the Subcontractor must include all of the Confidential <br />Information Security Requirements. <br />6. Confidential Information Disposition <br />When the Confidential Information is no longer needed, except as noted below, the <br />Confidential Information must be returned to HCA or destroyed. Media are to be destroyed <br />using a method documented within NIST 800-88 <br />(http://csrc.nist.gov/publications/PubsSPs.htmi). <br />a. For HCA's Confidential Information stored on network disks, deleting unneeded <br />Confidential Information is sufficient as long as the disks remain in a Secured <br />Area and otherwise meet the requirements listed in Section 3, Protection of <br />Confidential Information. Destruction of the Confidential Information as outlined in <br />this section of this Attachment may be deferred until the disks are retired, <br />replaced, or otherwise taken out of the Secured Area. <br />Washington State Page 25 of 53 HCA IAA K4649 <br />Health Care Authority Revised 10/2020 <br />