DDA County Services 27582 - Laserfiche WebLink

Home Browse Search

Special Terms and Gonditions c' optical discs (CDs or DVDs) in local workstation optical disc drives. Data provided by DSHSon optical discs which will be used in localworkstation optical disc drives and which will not betransported out of a Secure Area. When not in use for the contracted purpose, such discs must beStored in a Secure Area. workstations which access DSHS Data on optical oiscs must be locatedin an area which is.accessible only to authorrzed personnel, with access controlled through use of akey, card key, combination lock, or comparable mechanism d' 9ll'.":tdiscs (CDs or DVDs) in drives or jukeboxes attached to servers. Data provided byDSHS on optical discs which will be attache-d to network servers and which will not be transportedout of a Secure Area. Access to Data on these discs will be restricted to Authorized Users ftrroujrrthe use of access control lists which will grant access only after the Authorized User hasauthenticated to the network using a Unique User lD and Hardened password or otherauthentication mechanisms which provide equal or greater security, such as biometrics or smartcards' Data on discs attached to such servers musf be located in ln area, which is'accessible onlyto authorized personnel, with access controlled through use of a key, card'k"V, .oroin"tion lock, orcomparable mechanism. e' Paper documents. Any paper records must be protected by storing the records in a secure Area,which is only accessible to authorized personnel. When not in use, such records must be stored ina Secure Area.. f' Remote Access. Access to and use of the Data over the State Governmental Network (SGN) orsecure Access Washington (sAW will be controlled by DSHS staff who will issue authenticationcreden-tials (e.9. a Unique User lD and Hardened Password) to Authorized Users on Contractor,sstaff' Contractor will notifu DSHS staff immediately wheneu", "n Authorized User in possession ofsuch credentials is terminated or otherwise leaves the employ of the Contractor, and whenever anAuthorized User's duties change such that the Authorized'User no longer requires access toperform work for this Contract, g. Data storage on poftable devices or media. (1) Except where othenvise specified herein, DSHS Data shall not be stored by the Contractor onportable devices or media unless specifically authorized within the terms and conditions of theContract' lf so authorized, the Data shall be given the following protections:: (a) Encrypt the Data. (b) Control access to devices with a Unique User lD and Hardened password or strongerauthentication method such as a physical token or biometrics. (c) Manually lock devices whenever they are left unattended and set devices to lockautomatically after a period of inactivity, if this feature is available. Maximum period ofinactivity is 20 minutes. (d) Apply administrative and physical security controls to portable Devices and portable Mediaby: i. Keeping them in a Secure Area when not in use, ii. Using check-in/check-out procedures when they are shared, and iii. Taking frequent inventories. DSHS Central Contract Services '1769CS County Agreement 0S-1 6-2023 Page 23