Kittitas County.2363-49714.ACT and EET Quality Assurance with Judge's Signature

Home Browse Search

(a) SFT service provided Washington Technology Solutions (WaTech); or (b) The DCYF instance of Box.com. b. Any information containing sensitive data elements must be encrypted and password protected using a tool such as WinZip, 7zip, or something similar. c. An account is required to access either of the above solutions, you will need to make a request by contacting the contract contact listed on the cover page of this Agreement. d. Any other solution must be approved by the DCYF Information Security Office. To obtain approval, contact the contract contact listed on the cover page of this Agreement. Request must include the name of the solution, as well as, any information to help in the approval process. e. The Contractor must use a secure solution for electronic mail submissions which contain Confidential information, and Personal Information, as defined in the General Terms and Conditions. f. Information regarding receiving encrypted email from DCYF can be obtained at DCYF's website, located at: httos://www dcvf wa aov/services/child-welfare-providers/encrypted-email 10. System Protection. To prevent compromise of systems that contain DCYF Data or systems that Data passes through, the Contractor must: (1) Ensure all security patches or hotfixes applied Wthin three (3) months of being made available; (2) Have a method of ensuring that the requisite patches and hotfixes have been applied within the required timeframes; (3) Ensure systems containing Data shall have an Anti-Malware application installed, if available; and (4) Ensure that Anti-Malware software is kept up to date. The product, its anti -virus engine, and any malware database the system uses, will be no more than one update behind current. 11. Data Segregation. Data must be segregated or otherWse distinguishable from non-DCYF data. This is to ensure that when no longer needed by the Contractor, all Data can be identified for return or destruction. It also aids in determining whether Data has or may have been compromised in the event of a security breach. b. The Contractor must use one or more of the following methods to segregate Data: (1) Data will be kept on media (e.g. hard disk, optical disc, tape, etc.) which will contain no non- DCYF Data; and/or (2) Data will be stored in a logical container on electronic media, such as a partition or folder dedicated to Data; and/or (3) Data will be stored in a database which will contain no non-DCYF data; and/or Department of Children, Youth & Families 2017CF County Program Agreement 6-24-20 Page 24