Robin H Read FINAL CONTRACT - Laserfiche WebLink

Home Browse Search

Special Terms and Conditions c. Optical discs (CDs or DVDs) in local workstation optical disc drives. Data provided by DSHS on optical discs which will be used in local workstation ootical disc, drives and which will not be transported out of a Secure Area. When not in use for the contracted purpose, such discs must be Stored in a Secure Area. Works_ations which access DSHS Data on optical discs must be located in an area which is accessible orly to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism Optical discs (CDs or DVDs) in drives or jukeboxes attached to servers. Data provided by DSHS on optical discs which will be attached to network servers and which will not be transported out of a Secure Area. Access to Data on these discs will be restricted to Authorized Users through the use of access control lists which will grant access on y after the Authorized User has authenticated to the network using a Unique User ID anc Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Data on discs attached to such servers must be locatd in an area, which is accessible only to authorized personnel, with access control ed through use 6 a key, card key, combination lock, or comparable mechanism. e Paper documents. Any paper records must be proted..-d by stor ng the records in a Secure Area, which is only accessible to authofized personnel. When iot in use, such records must be stored in a Secure Area.. Remote Access. Access to and use of the Data over the State Governmental Network (SGN) or Secure Access Washington (SAV! will be ccntrolled by CrSHS staf who will issue authentication credentials (e.g. a Unique User ICr and Hardened Password) to Authorized Users on Contractor's staff. Contractor will notify DSHS staff immediately whenever an Authorized User in possession of such credentials is terminated or otherwise leaves the en -ploy of the Contractor, and whenever an Authorized User's duties change such that the Authorized User no longer requires access to perform work for this Contract. g Data storage on portable devices or media, (1) Except where otherwise specified herein, DSHS Data shell not be stored by the Contractor on portable devices or media unless specifically authorized within the terms and conditions of the Contract. If so authorized, the Data shall be given the foliowinc protections:: (a) Encrypt the Data. (b) Control access to devices with a Unique User ID and Hardened Password or stronger authentication method such as a physical token or biometrics. (c) Manually lock devices whenever they are left unattended and set devices to lock automatically after a period of inactivity, if this feature is available. Maximum period of inactivity is 20 minutes. (d) Apply administrative and physical security controls to Portable Devices and Portable Media by: i. Keeping them in a SeCLre Area when not in use, ii. Using check-in/check-out procedures when then are shared, and iii. Taking frequent invento-ies. DSHS Central Contract Services Page 23 1769CS County Agreement 05-16-2023