Laserfiche WebLink
<br />63 <br /> <br />(2) Must not be comprised of all the same letter or number (11111, 22222, <br />aaaaa, would not be acceptable) <br />(3) Must not contain a “run” of three or more consecutive numbers (12398, <br />98743 would not be acceptable) <br />j. If the contract specifically allows for the storage of Confidential Information on a <br />Mobile Device, passcodes used on the device must: <br />(1) Be a minimum of six alphanumeric characters. <br />(2) Contain at least three unique character classes (upper case, lower case, <br />letter, number). <br />(3) Not contain more than a three consecutive character run. Passcodes <br />consisting of 12345, or abcd12 would not be acceptable. <br />k. Render the device unusable after a maximum of 10 failed logon attempts. <br />5. Protection of Data. The Lead/sub grantee agrees to store Data on one or more of the <br />following media and protect the Data as described: <br />a. Hard disk drives. For Data stored on local workstation hard disks, access to the <br />Data will be restricted to Authorized User(s) by requiring logon to the local <br />workstation using a Unique User ID and Hardened Password or other <br />authentication mechanisms which provide equal or greater security, such as <br />biometrics or smart cards. <br />b. Network server disks. For Data stored on hard disks mounted on network <br />servers and made available through shared folders, access to the Data will be <br />restricted to Authorized Users through the use of access control lists which will <br />grant access only after the Authorized User has authenticated to the network <br />using a Unique User ID and Hardened Password or other authentication <br />mechanisms which provide equal or greater security, such as biometrics or smart <br />cards. Data on disks mounted to such servers must be located in an area which <br />is accessible only to authorized personnel, with access controlled through use of <br />a key, card key, combination lock, or comparable mechanism. <br />For DSHS Confidential Information stored on these disks, deleting unneeded <br />Data is sufficient as long as the disks remain in a Secure Area an d otherwise <br />meet the requirements listed in the above paragraph. Destruction of the Data, <br />as outlined below in Section 8 Data Disposition, may be deferred until the disks <br />are retired, replaced, or otherwise taken out of the Secure Area. <br />c. Optical discs (CDs or DVDs) in local workstation optical disc drives. Data <br />provided by DSHS on optical discs which will be used in local workstation optical <br />disc drives and which will not be transported out of a Secure Area. When not in <br />use for the contracted purpose, such discs must be Stored in a Secure Area. <br />Workstations which access DSHS Data on optical discs must be located in an area <br />which is accessible only to authorized personnel, with access controlled through <br />use of a key, card key, combination lock, or comparable mechanism. <br />d. Optical discs (CDs or DVDs) in drives or jukeboxes attached to servers. Data <br />provided by DSHS on optical discs which will be attached to network servers and <br />which will not be transported out of a Secure Area. Access to Data on these <br />discs will be restricted to Authorized Users through the use of access control lists <br />which will grant access only after the Authorized User has authenticated to the