Laserfiche WebLink
WSP Contract No.TRACS00259 <br />For External Use Only: <br />Attachment A: <br />Statement of Work for <br />Data Security Requirements <br />The Party to this Agreement that receives personal information from another state agency must protect it in <br />the same manner as the original agency that collected the information pursuant to Executive Order 00-03. <br />5. Copyri_ghfs <br />For all purposes under Title 17 U.S.C., the State of Washington shall be the copyright owner of all <br />copyrightable material which originates from this Agreement, including but not limited to reports, <br />documents, pamphlets, advertisements, books, magazines, surveys, studies, computer programs, films, <br />tapes, or sound reproductions. Ownership includes the right to use, copyright, patent, register, and transfer <br />these rights. Notwithstanding the foregoing, Agency shall retain copyrights on all Agency owned <br />copyrightable materials. <br />6. Security of Records <br />Each Party shall take due care to protect the shared Records from unauthorized physical and electronic <br />access, as described in this Agreement, to ensure the Parties are in compliance with all appropriate <br />federal laws, Criminal Justice Information Services (CJIS) Security Policy as appropriate, and <br />applicable provisions of the State of Washington Office of the Chief Information Officer (OCIO) security <br />standards. <br />7. Records Handling Requirements <br />The handling requirements and protective measures for (Restricted) Confidential Information or <br />Records while in motion and at rest are as follows: <br />a. GENERAL ACCESS: <br />Access to the TraCS application is based on business need -to -know. It is explicitly <br />authorized by the WSP Record owner to specific individuals. <br />b. Transmission of Records: <br />i. Electronic file transfer— Secure file transfer (encrypted) required <br />ii. Transmission by mail —Traceable delivery required (e.g., messenger, federal or <br />commercial carrier, certified, return receipt mail) <br />iii. Transmission by facsimile to a facility that is not secure is prohibited <br />iv. Electronic Mail — Encrypted files/attached to email required <br />V. Portable Storage Media, e.g., CDs, DVDs, USB flash drives, tapes, etc. — Encryption <br />Required <br />c. Print: <br />Store in a secured and lockable enclosure. <br />d. Copying: <br />Photocopying equipment use electronic storage devices to process the photocopied/ <br />scanned images. Any electronic storage devices in the photocopying equipment must be <br />either wiped or destroyed upon termination of this Agreement <br />e. Media Disposal: <br />i. Printed materials (reports and documents): Destruction is required (recycling is <br />prohibited). Crosscut shredding of printed material is approved. The use of certified, <br />marked, and locked bins to hold printed material until it is shredded is appropriate. <br />ii. Removable magnetic or optical storage media (tape, diskettes, CDs): Media must be <br />destroyed or deposited in certified bins specifically designated for magnetic media or <br />"cleaned" using a U.S. Department of Defense -standard Data cleaning program and <br />then may be reused. Note: Inoperable electronic media must be destroyed. For <br />example, failed hard disks are not returned to the manufacturer, but are destroyed. <br />f. Physical Security of Data (Records): <br />Access to areas containing the Data (Records) must be physically restricted. Records must <br />be locked when left unattended. <br />TraCS Data Sharing Agreement Approved by AGO 02/04/2026 Page 11 of 14 <br />