Executed ACT and EET Agreement - Laserfiche WebLink

Home Browse Search

(B) When accessing Confidential lnformation and Data from an external location (the Data will traverse the lnternet or othenruise travel outside the Trusted network), mitigate risk and enforce hardened password and logon requirements for users by employing measuresthat include: (a) Ensuring mitigations applied to the system don't allowend-usermodification; (b) Not allowing the use of dial-up connections; (c) Using industry standard protomls and solutions for remote access. Examples include secure VPN and Citrix; (d) Encrypting all remote access traffic from the external workstation to Trusted Network or to a component within the Trusted Network. The traffic must be encrypted at all times while traversing any network, including the lnternet, which is not a Trusted Network; (e) Ensuring that the remote access system prompts for re-authentication or performs automated session termination after no more than thirty (30)minutes of inactivity; and (f) Ensuring the use of Multi-Factor Authentication (MFA) to connect from the external end point to the internal end point. (9) Hardened passwords or PIN codes may meet a lesser standard if used in conjunction with another authentication mechanism, such as a biometric (fingerprint, face recognition, iris scan) or token (software, hardware, smart card, etc.). lf a lesser standard is authorized underthis subsection, the PIN or password must: (a) Be at least five (5) letters or numbers when used in conjunction with at lea st one other authentication factor; (b) Not be comprised of all the same letter or number (11111,22222, aaaaa, would not be acceptable); and (c) Not contain a "run" of three or more consecutive numbers (12398, gBT43 would not be acceptable). (10) lf the Contract specifically allows for the storage of Confidential lnformation on a portable Device, passwords used on the device must: (a) Be a minimum of six (6) alphanumeric characters; (b) Contain at least three unique character classes (uppercase, lower case, letter, number); (c) Not contain more than a three consecutive character run. Passcodes consisting of (1 2g45, or abcd 12 would not be acceptable); and (d) Render the device unusable after a maximum of five (5) failed logon attempts. B. Protection of Data. The Contractor agrees to store Data on one or more of the following medias and protect the Data asdescribed: (1) Hard disk drives Departmentof Children, Youlh & Families 2017CF County Program Agreement 6-24-20 d Page 20