|
k.
<br />Special Terms and Conditions
<br />.Mobile Device" means a computing device, typically smaller than a notebook, which runs a mobile
<br />operating system, such as iOd, AnJroid, ol. Windo*r Phone. Mobile Devices include smad phones,
<br />most tablets, and other form factors.
<br />,,Multi-factor Authentication" means controlling access to computers and other lT resources by
<br />requiring two or *orrpi"."= of evidence that-the user is who they claim to be' These pieces of
<br />evidence consist of something the user knows, such as a password or PIN, something the user has
<br />such as a key card, .*"tt ""i0, or physical token; and something the user is, a biometric identifier
<br />such as a fingerprint, facial ..an, oi retinal scan. ;'PlN" means a personal identification number, a
<br />series of numbers which act as a password for a device. since PlNs are typically only four to six
<br />characters, plNs are uiually used in conjunction with another factor of authentication, such as a
<br />fingerprint.
<br />,,portable Device" means any computing device with a small form factor, designed to be transported
<br />trom fLce to place. portable devices are primarily battery powered devices with base computing
<br />resources in the form of a processor, memory, storage, and network access' Examples include' but
<br />are not limited to, mobile pnon"t, tablets, anO laptop!. Mobile Device is a subset of Portable
<br />Device.
<br />,,portable Media" means any machine readable media that may routinely be stored ormoved
<br />independently of computing devices. Examples include magnetic tapes, opticaldiscs.(CDs or
<br />DVDs), flash memory'(thurib drive) devices, external hard drives, and internal hard drives that have
<br />been removed from a computing device'
<br />,,secure Area" means an area to which only authorized representatives of the entity possessing the
<br />Confidential lnformation have access, and access is controlled through use oi a key, card key'
<br />combination lock, or comparable mechanism. Secure Areas may include buildings' rooms 0r
<br />locked storage containers (such as a filing cabinet or desk drawer) within a room, as. long as access
<br />to the Confidential lnformaiion is not avaiiable to unauthorized personnel' ln otheruvise Secure
<br />Ar""., such as an office with restricted access, the Data must be secured in such a way as to
<br />prevent access by non*authorized staff such as janitorialorfacility security staff, when authorized
<br />Contractor staff are not present io ensure that nbn-authorized staff cannot access it'
<br />.Trusted Network" means a network operated and maintained by the Contractor, which includes
<br />security controls sufficient to protect OSHS Data on that network. Controls would include a firewall
<br />between any other networks, access control lists on networking devices such as routers and
<br />switches, and other such mechanisms which protect the confidentiality, integrity, and availability of
<br />the Data.
<br />,,Unique User lD" means a string of characters that identifies a specific user and which, in
<br />conjunction with a password, pJssphrase or other mechanism, authenticates a user to an
<br />information system.
<br />L
<br />m
<br />tt
<br />o-
<br />2. AuthoritY. The securitY req uirements described in this document reflect the applicable requirements of
<br />policies and standards of th e Washington Technology Services Agency
<br />\Na o\/?co &.liel,:l ca tar &fielci
<br />and of the DSHS lnformation Security
<br />these requirem ents can be found here
<br />private-a nd-sectire , which is a site dev
<br />DSHS Central Contracts and Lega I Services
<br />3.Administrative Gontrols. The Contractor must have the following controls in place;
<br />USHS Cenlral Contract Services
<br />6017CF County Program Agreement (10-31-2017)
<br />n
<br />Page I 7
|