Robin H Read FINAL CONTRACT - Laserfiche WebLink

Home Browse Search

Special Terms and Conditions (5) Ensuring that the remote access system prompts for re-2uthentication or performs automated session termina-ion after no more than 30 minutes o- inactivity. (6) Ensuring use of Multi -factor Authentication to connect from the external end point to the internal end point. i. Passwords or PIN codes may meet a lesser standard if used in conjunction with another authentication mechanism, such as a biometric (fingerpr nt, face recognition, iris scan) or token (software, hardware, smart card, etc.) in that case: (1) The PIN or password must be at least 5 letters or numbers when used in conjunction with at least one other authentication factor (2) Must not be comprised of all The same IEtter or number (11111, 22222, aaaaa, would not be acceptable) (3) Must not contain a "run" of three or more consecutive numbers (12398, 98743 would not be acceptable) If the contract specifically allows for the storage of Confidential Information on a Mobile Device, passcodes used on the device must: (1) Be a minimum of six alphanumeric characters (2) Contain at least tree unique character c asses (upper case, Icwer case, letter, number). (3) Not contain more than a three consecutive character run. Passcodes consisting of 12345, or abcd12 would no- be acceptable. k. Render the device urusable after a maximum of 10 failed logion attempts. 5. Protection of Data. The Contractor agrees to s4ore Data on one or more of the following media and protect the Data as described: a_ Hard disk drives. For Data stored on local workstation hard disks, access to the Data will be restricted to Authorized User(s) by requiring logon to the loca workstation using a Unique User ID and Hardened Password or other authentication mechanisms, which provide equal or greater security, such as biometrics or smart cards. b. Network server disks. For Data stored on hard disks mcunted on network servers and made available through sha-ed folders, access to the Data will be restricted to Authorized Users through the use of access control lists which will grant access only after the Authorized User has authenticated to the network using a Unique User ID and Hardenec Password or other authentication mechanisms which 3rovide equal or greater security such as biometrics or smart cards, Data on disks mounted to such servers must be located in an area, which is accessible only to authorized personnel, with access controlled through use o-a kel, card key, combination lock, or comparable mechanism. For DSHS Confidential Information stored on these disks, deleting unneeded Data is sufficient as long as the disks remain in a Secure Area anc otherwise mee- the requirements listed in the above paragraph. Destructicn of the Data, as outlined below in Section 8 Data Disposition, may be deferred until the disks are retired, replaced, or otherwise taken out of the Secure Area. DSHS Central Contract Services Page 22 1769CS County Agreement 05-16-2023