Resolution 2025-084 - Laserfiche WebLink

Home Browse Search

Special Terms and Conditions authentication mechanisms which provide equalor greater security, such as biometrics or smart cards. Data on disks mounted to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. For DSHS Confidential lnformation stored on these disks, deleting unneeded Data is sufficient as long as the dlsks remain in a Secure Area and othenarise meet the requirements listed in the above paragraph. Destruction of the Data, as outlined below in Section 8 Data Disposition, may be deferred until the disks are retired, replaced, or otherwise taken out of the Secure Area. Optical discs (CDs or DVDs) in localworkstation optical disc drives. Data provided by DSHS on optical discs which will be used in local workstation optical disc drives and which will not be transported out of a Secure Area. When not in use for the contracted purpose, such discs must be Stored in a Secure Area. Workstations which access DSHS Data on optical discs must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. d. Optical discs (CDs or DVDs) in drives or jukeboxes attached to servers. Data provided by DSHS on optical discs which will be attached to network servers and which will not be transported out of a Secure Area. Access to Data on these discs will be restricted to Authorized Users through the use of access conirol lists which will grant access only after the Authorized User has authenticated to the network using a Unique User lD and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. Data on discs attached to such servers must be located in an area which is accessible only to authorized personnel, with access controlled through use of a key, card key, combination lock, or comparable mechanism. e. Paper documents. Any paper records must be protected by storing the records in a Secure Area which is only accessible to authorized personnel. When not in use, such records must be stored in a Secure Area. f. Remote Access. Access io and use of the Data over the State Governmental Network (SGN) or Secure Access Washington (SAW will be controlled by DSHS staff who will issue authentication credentials (e.9. a Unique User lD and Hardened Password) to Authorized Users on Contractor's staff. Contractor will notify DSHS staff immediaiely whenever an Authorized User in possession of such credentials is terminated or oiherwise leaves the employ of the Contractor, and whenever an Authorized User's duties change such that the Authorized User no longer requires access to perform work for this Contract. g. Data storage on portable devices or media ('1) Except where oiherwise specified herein, DSHS Data shall not be stored by the Contractor on portable devices or media unless specifically authorized within the terms and conditions of the Contract. lf so authorized, the Data shall be given the following protections: (a) Encrypt the Data (b) Control access to devices wiih a Unique User lD and Hardened Password or stronger authentication method such as a physicaltoken or biometrics. (c) Manually lock devices whenever they are left unattended and sei devices to lock automatically after a period of inactivity, if this feature is available. Maximum period of inactivity is 20 minutes. DS!{S Centrai Contract Services 60.1 7C f County Prog tarn Agreement { 1 C-3 1 -2O 1 7 )Page 1 3