Kittitas County.2363-49714.ACT and EET Quality Assurance with Judge's Signature

Home Browse Search

prevent access by non -authorized staff such as janitorial or facility security staff, when authorized Contractor staff are not present to ensure that non -authorized staff cannot access it. p. "Staff" means the Contractor's directors, officers, employees, and agents who provide goods or services pursuant to this Contract. "Staff also means Subcontractors' directors, officers, employees, and agents who provide goods or services on behalf of the Contractor. The term "Staff also means the Subcontractors' directors, officers, employees, and agents who provide goods or services on behalf of the Subcontractor and Contractor. q. "Trusted Network" means a network operated and maintained by the Contractor, which includes security controls sufficient to protect DCYF Data on that network. Controls would include a firewall between any other networks, access control lists on networking devices such as routers and switches, and other such mechanisms which protect the confidentiality, integrity, and availability of the Data. r. "Unique User ID" means a string of characters that identifies a specific user and which, in conjunction with a password, passphrase or other mechanism, authenticates a user to an information system. 2. Authority. The security requirements described in this contract reflect the applicable requirements of Standard 141.10 (https:Hocio.wa.gov/policies) of the Office of the Chief Information Officer for the state of Washington, and of the DCYF Information Security Policy and Standards Manual. 3. Scope of Protection The requirements described in this Contract apply to Confidential Information and Data related to the subject matter of this Contract that is delivered, received, used, shared, acquired, created, developed, revised, modified, or amended by DCYF, the Contractor, or Subcontractors. 4. Data Classification a. The Washington State Office of the Chief Information Officer (OCIO) has established policies that classify data into categories based on the data's sensitivity. The categories described in Section 4 of OCIO policy No. 141.10 are adopted and incorporated by reference in this Agreement. Pursuant to Section 4 of OCIO policy No. 141.10 the categories are as follows: (1) Category 1 —Public Information Public information is information that can be or currently is released to the public. It does not need protection from unauthorized disclosure, but does need integrity and availability protection controls. (2) Category 2 — Sensitive Information Sensitive information may not be specifically protected from disclosure by lawand is for official use only. Sensitive information is generally not released to the public unless specifically requested. (3) Category 3 — Confidential Information Confidential information is information that is specifically protected from either release or disclosure by law. This includes, but is not limited to: Department of Children, Youth & Families 2017CF County Pro gram Agreement 6-24-20 Page 17