DDA County Services 27582 - Laserfiche WebLink

Home Browse Search

h Special Terms and Conditions (2) !4e! being transpofted outside of a Secure Area, Portable Devices and portable Media withDSHS Confidential lnformation must be under the physical control of Confractor staff withauthorization to access the Data, even if the Data is encrypted. Data stored for backup purposes. (1) DSHS Confidential lnformation may be stored on Portable Media as pad of a Contractor,sexisting, documented backup process for business continuity or disaster reao*ry prrposes.Such storage is authorized until such time as that media woulo oe reused ouiinlirie course ofnormal backup operations. lf backup media is retired while DSHS Confidential information stiilexists upon it, such media will be destroyed at that time in accordance with the dispositionrequirements below in Section g Data Disposition. (2) Data may be stored on non-portable media (e.g. Storage Area Network drives, virtualmedia,etc.) as part of a Contractor's existing, documented na6tup process for business continuiry ordisaster recovery purposes. lf so, such media will be protecied as othenrvise described in thisexhibit. lf this media is retired while DSHS Confidential lnformation stillexists ,pon it, the datawill be-destroyed at that time in accordance with the disposition requirements below in Section BData Disposition Gloud storage. DSHS confidential lnformation requires protections equal to or greater than thosespecified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DSHS northe Contraclor has control of the environment in wh-ich the Dati'L stored. For this reason: (1 ) DSHS Data will not be stored in any consumer grade Cloud solution, unless all of the followingconditions are met: (a) Contractor has written procedures in place governing use of the Cloud storage andcontractor attest to the contact listed in theiontractind keep a copy of that-attestation foryour records in writing that all such procedures will be uniformly fotiowed. (b)The Data will be Encrypted while within the contractor network. (c) The Data wilr remain Encrypted during transmission to the croud. (d) The Data will remain Encrypted at all times while residing within the Cloud storage sotution. (e) The Contractor will possess a decryption key for the Data, and the decryption key wi1 bepossessed only by the Contractor. (f1 The Data will not be downloaded to non-authorized systems, meaning systems that are noton the contractor network (g) The Data will not be decrypted until downloaded onto a computer within the control of anAuthorized User and within either the DSHS or contractor,s network. (2) Data will not be stored on an Enterprise Cloud storage solution unless either: (a) The Cloud storage provider is treated as any other sub-Contractor, and agrees in writing toall of the requirements within this exhibit; or, (b) The Cloud storage sotution used is HIpAA compliant. DSHS Central Contract Services 1 769CS County Agreement 05-16-2023 Page 24