Fully Executed Contract - Laserfiche WebLink

Home Browse Search

WSP Contract No.TRACS00259 For External Use OnlY: Attachment A: Statement of Work for Data SecuritY Requirements The Party to this Agreement that receives personal information from another state agency must protect it in the same manner as the original agency that collected the information pursuant to Executive Order 00-ffi. 5. Copvrishts For all purposes under Title 17 U.S.C., the State of Washington shall be the copyright owner of all copyrightable material which originates from this Agreement, including but not limited to reports, documents, pamphlets, advertisements, books, magazines, surveys, studies, computer programs, films, tapes, or sound reproductions. Ownership includes the right to use, copyright, patent, register, and transfer these rights. Notwithstanding the foregoing, Agency shall retain copyrights on allAgency owned copyrightable materials. 6. Securitv of Records racnRryretoprotectthesharedRecordsfromunauthorizedphysicalandelectronic access, ai described in this Agreement, to ensure the Parties are in compliance with all appropriate federal laws, Criminal Justice lnformation Services (CJIS) Security Policy as appropriate, and appticable provisions of the State of Washington Office of the Chief lnformation Officer (OCIO) security standards. 7. Records Handling Requirements The hanffig requiiements and protective measures for (Restricted) Confidential lnformation or Records while in motion and at rest are as follows: a. GENERALACCESS; Access to the TraCS apptication is based on business need-to-know. lt is explicitly authorized by the WSP Record owner to specific individuals. b. Iransmission of Records: i. Electronic file transfer- Secure file transfer (encrypted) required ii. Transmission by mail-Traceable delivery required (e.9., messenger, federal or commercial carrier, certified, return receipt mail) iii. Transmission by facsimile to a facility that is not secure is prohibited iv. Electronic Mail - Encrypted filesiattached to email required v. Portable Storage Media, e.g., CDs, DVDs, USB flash drives, tapes, etc. - Encryption Required c. Print: Store in a secured and lockable enclosure. d. Copying: Phofocopying equipment use electronic storage devices to process the photocopied/ scanned images. Any electronic storage devices in the photocopying equipment must be either wiped or destroyed upon termination of this Agreement e. Media Disposal;i. Printed materials (reports and documents): Destruction is required (recycling is prohibited). Crosscut shredding of printed material is approved. The use of certified, marked, and locked bins to hold printed material until it is shredded is appropriate. ii. Removable magnetic or optical storage media (tape, diskettes, CDs): Media must be destroyed or deposited in certified bins specifically designated for magnetic media or "cleaned" using a U.S. Department of Defense-standard Data cleaning program and then may be reused. Note: lnoperable electronic media must be destroyed. For example, failed hard disks are not returned to the manufacturer, but are destroyed. f. Physical Security of Data (Records): Aciess to areas containing the Data (Records) must be physically restricted. Records must be locked when left unattended. TraCS Data Sharing Agreement Approved by AGO 040412026 Page 11 of 14