Laserfiche WebLink
within 3 months of being made available. <br />b. The Lead/sub grantee will have a method of ensuring that the requisite patches <br />and hotfixes have been applied within the required timeframes. <br />C. Systems containing DSHS Data shall have an Anti-Malware application, if <br />available, installed. <br />d. Anti-Malware software shall be kept up to date. The product, its anti -virus <br />engine, and any malware database the system uses, will be no more than one <br />update behind current. <br />Data Segregation. <br />a. DSHS Data must be segregated or otherwise distinguishable from non-DSHS <br />data. This is to ensure that when no longer needed by the Lead/sub grantee, all <br />DSHS Data can be identified for return or destruction. It also aids in determining <br />whether DSHS Data has or may have been compromised in the event of a <br />security breach. As such, one or more of the following methods will be used for <br />data segregation. <br />(1) DSHS Data will be kept on media (e.g. hard disk, optical disc, tape, etc.) <br />which will contain no non-DSHS Data. And/or, <br />(2) DSHS Data will be stored in a logical container on electronic media, such <br />as a partition or folder dedicated to DSHS Data. And/or, <br />(3) DSHS Data will be stored in a database which will contain no non-DSHS <br />data. And/or, <br />(4) DSHS Data will be stored within a database and will be distinguishable <br />from non-DSHS data by the value of a specific field or fields within <br />database records. <br />(5) When stored as physical paper documents, DSHS Data will be physically <br />segregated from non-DSHS data in a drawer, folder, or other container. <br />b. When it is not feasible or practical to segregate DSHS Data from non-DSHS data, <br />then both the DSHS Data and the non-DSHS data with which it is commingled <br />must be protected as described in this exhibit. <br />8. Data Disposition. When the contracted work has been completed or when the Data is <br />no longer needed, except as noted above in Section 5.b, Data shall be returned to DSHS <br />or destroyed. Media on which Data may be stored and associated acceptable methods <br />of destruction are as follows: _ <br />Data stored on: <br />Server or workstation hard disks, or <br />Removable media (e.g. floppies, USB flash <br />drives, portable hard disks) excluding <br />optical discs <br />Will be destroyed by: <br />Using a "wipe" utility which will overwrite <br />the Data at least three (3) times using either <br />random or single character data, or <br />Degaussing sufficiently to ensure that the <br />Data cannot be reconstructed, or <br />Physically destroying the disk <br />Paper documents with sensitive or Recycling through a contracted firm, <br />Confidential Information I provided the contract with the recycler <br />