|
k.
<br />Special Terms and Conditions
<br />',Mobile Device" means a computing device, typically smaller than a notebook, which runs a mobile
<br />operating system, such as iOS, nnOroiO, or Windows Phone. Mobile Devices include smart phones,
<br />most tablets, and other form factors.
<br />"Multi-factor Authentication" means controlling access to computers and other lT resources by
<br />requiring two or more pieces of evidence thaitne user is who they claim to be' These pieces of
<br />evidenc6 consist of something the user knows, such as a password or PIN; something the user has
<br />such as a key card, smart cafr, or physicaltoken; and something the user is, a biometric identifier
<br />such as a fingerprint, facial scan, or retinal scan. "PlN" means a personal identification number, a
<br />series of numbers which act as a password for a device. Since PlNs are typically only four to six
<br />characters, PlNs are usually used in conjunction with another factor of authentication, such as a
<br />fingerprint.
<br />"portable Device" means any computing device with a smallform factor, designed to be transported
<br />from place to place. Portabll devices ale primarily battery powered devices with base computing
<br />resources in the form of a processor, memory, storage, and network access. Examples include, but
<br />are not limited to, mobile phon"s, tablets, and laptops. Mobile Device is a subset of Portable
<br />Device.
<br />"portable Media" means any machine readable media that may routinely be stored or moved
<br />independently of computing devices. Examples include magnetic tapes, optical discs.(CDs or
<br />DVDs), flash memory'(thurib drive) devices, external hard drives, and internal hard drives that have
<br />been removed from a computing device.
<br />"secure Area" means an area to which only authorized representatives of the entity possessing the
<br />Confidential lnformation have access, and access is controlled through use of a key, card key,
<br />combination lock, or comparable mechanism. Secure Areas may include buildings' rooms or
<br />locked storage containers (such as a flling cabinet or desk drawer)within a room, as long as access
<br />to the Confidential lnformaiion is not available to unauthorized personnel. ln otherwise Secure
<br />Areas, such as an office with restricted access, the Daia must be secured in such a way as to
<br />prevent access by non-authorized staff such as janitorial or facility security staff, when authorized
<br />Contractor staff are not present to ensure that non-authorized staff cannot access it.
<br />"Trusted Network" means a network operated and maintained by the Contractor, which includes
<br />security controls sufficient to protect DSHS Data on that network. Controls would include a firewall
<br />between any other networks, access control lists on networking devices such as routers and
<br />switches, and other such mechanisms which protect the confidentiality, integrity, and availability of
<br />the Data.
<br />',Unique User lD" means a string of characters that identifies a specific user and which, in
<br />conjunction with a password, pissphrase or other mechanism, authenticates a user to an
<br />information system.
<br />m
<br />2. Authority. Th
<br />n
<br />o
<br />e security require ments described in this document reflect the applicable requirements of
<br />Chief lnformation Officer for the stateStandard 141 .1
<br />of Washington,Standards Manual. Reference
<br />material related to these requi rements can be found here
<br />ecurityclie nt-information-orivate-a nd-secure , which is a site develoPed bY the DS lnformation
<br />Office and hosted by DSHS CentralC ontracts and Legal Services.
<br />Administrative Controls, The Contractor must have the following controls in place:
<br />a. A documented security policy governing the secure use of rts computer network and systems, and
<br />0 (https:/locio.wa.qovlpolicies) of the Offlce of the
<br />and of the DSHS lnformation Security Policy and
<br />3
<br />DSHS Central Contract Services
<br />6017CF County Program Agreement (10-31-2017)Page'10
|