Robin H Read FINAL CONTRACT - Laserfiche WebLink

Home Browse Search

Special Terms and Conditions (3) If the Data includes protected health information covered by tha Health Insurance Portability and Accountability Act (HIPAA), the Cloud provider must sign a Business Associate Agreement prior to Data being stored in their Cloud solution. 6. System Protection. To prevent compromise of systems which contain DSHS Data or through which that Data passes: a. Systems containing DSHS Data must have all security patches or lotfixes applied within 3 months of being made available. b. The Contractor will have a method of ensuring that the requisite patches and hotfixes have been applied within the required timeframes. c. Systems containing DSHS Data shall have an Anti-Malware application, if available, installed. d. Anti-Malware software shall be kept up to datr. The product, its arti-virus engine, and any malware database the system uses, will be no more than one update behind current. 7. Data Segregation. a, DSHS category 4 data must be segregated or otherwise distinguishable from non-DSHS data. This is to ensure that when no longer needed by the Contractor, all DSF-S Data can be identified for return or destruction. It also aids in determiniig whether DSHS Data has or may have been compromised in the event of a security breach. As such, one or more of the following methods will be used for data segregation (1) DSHS Data will be kept on media (e.g. ha•d disk, optical disc, tape, etc.) which will contain no non-DSHS Data. (2) DSHS Data will be stored in a IDgical container on electronic media, such as a partition or folder dedicated to DSHS Data. (3) DSHS Data will be stored in a database w-iich will contain no non-DSHS data. And/or, (4) DSHS Data will be stored within a database and will be distinguishable from non-DSHS data by the value of a specific field or fields within database records. (5) When stored as physical paper documents, DSHS Data will be physically segregated from non- DSHS data in a drawer, folder, x other container. b. When it is not feasible or practical t:) segregate DSHS Data from nog-DSHS data, then both the DSHS Data and the non-DSHS data with whici it is commi-igled must be protected as described in this exhibit. 8. Data Disposition. When the contracted work has been completed or when the Data is no longer needed, except as noted above in Section 5.b, Data shall be returned tc DSHS or destroyed. Media on which Data may be stored and associa-ed acceptable methods of destruction are as follows: i Data stored on: Will be destroyed bye Server or workstation hard disks, or Using a "wipe" utility which will overwrite the Data at least three (3, times using either random or single character data, or Page 25 DSHS Central Contract Services 1769CS County Agreement 05-16-2023