Executed ACT and EET Agreement - Laserfiche WebLink

Home Browse Search

prevent access by non-authorized staff such as janitorial or facility security stafl when authorized Contractor staff are not present to ensure that non-authorized staff cannot access it. p. "Staff" means the Contracto/s directors, officers, employees, and agents who provide goods or services pursuant to this Contract. "Staff'also means Subcontractors' directors, officers, employees, and agents who provide goods or services on behalf of the Contractor. The term "Stafr' also means the Subcontractors' directors, officers, employees, and agents who provide goods or services on behalf of the Subcontractor and Contractor. q. "Trusted Network" means a network operated and maintained by the Contractor, wlrich includes security controls sufficientto protect DCYF Data on that network. Controls would include a firewall between any other networks, access controllists on networking devices such as routers and switches, and other such mechanisms wtrich protect the confidentiality, integrity, and availability of the Data. r "Unique User lD" means a string of characters that identifies a specific user and wtrich, in conjunction with a password, passphrase or other mechanism, authenticates a user to an information system. 3 4 2. Authority The security requirements described in this contract reflect the applicable requirements of Standard 141 .10 (https://ocio.wa.gov/policies) of the Office of the Chief lnformation Officer for the state of Washington, and of the DCYF lnformation Security Policy and Standards Manual. Scope of Protection The requirements described in this Contract apply to Confidential lnformation and Data related to the subject matter of this Contract that is delivered, received, used, shared, acquired, created, developed, revised, modified, or amended by DCYF, the contractor, or subcontractors. Data Classification The Washington State Office of the Chief lnformation Officer (OCIO) has established policies that classify data into categories based on the data's sensitivity. The categories described in Section 4 of OCIO policy No. 141 .10 are adopted and incorporated by reference in this Agreement. pursuant to section 4 of oclo policy No. 141 .10 the categories are as follows: (1) Category 1 - Public lnformation Public information is information that can be or currenfly is released to the public. lt does not need protection from unauthorized disclosure, but does need integrity and availability protection controls. (2) Category 2 - Sensitive lnformation Sensitive information may not be specifically protected from disclosure by lawand is for official use only. Sensitive information is generally not released to the public unl-ess specifically requested. (3) Category 3 - Confidential lnformation Confidential information is information that is specifically protected from either release ordisclosure by law. This includes, but is not limited to: Departmentof Children, Youth & Families 2017CF County Program Agreement 6-24-20 a Page 17