Fully Executed Contract - Laserfiche WebLink

Home Browse Search

WSP Contract No.TRACSoo2sg For External Use OnlY: '",t*TilTifr** ".Data Security Requirementsg. Electronic Records af Resf; lf there is a need for Records to be stored on any of the Recipient's devices, the Agency must assure unauthorized access cannot take place, including but not limited to session locks with password protection when the computer is on and left unattended. Records stored on non-WSP equipment must be encrypted utilizing FIPS 140-2 certified encryption software as required by Section J(iv) below. h. Authentication of User ldentity:i. Authentication from inside a WSP facility for the Agency staff to access internal LAN and computer systems requires User lD and password. ii. Authentication for the Agency staff from a location outside of a WSP facility requires strong authentication (e.g., digital certificates, hardware, tokens, biometrics, etc.). i. Records Recovery: lf either Party experiences loss of the Records or equipment obtained or maintained pursuant to this Agreement, that Party shall promptly provide written notiflcation to the other Party's Contract Manager. i. Sysfems Management:- The Agency shall ensure all systems, including portable systems, are maintained with all best security practices equal to WSP's including but not limited to: i. lnstall and maintain commercially available antivirus program ii. Maintain current levels of security patches on operating systems iii. Utilize firewallsiv. Utilize FIPS 140-2 certified encryption software with proper configurations v. Maintain physically secure areas for information systems vi. Monitor logsvii. Utilize an established incident plan viii. Report incidents involving WSP Data TraCS Data Sharing Agreement Approved by AGO 0A0412026 Page 12 ol 14