Fully Executed Agreement (2) - Laserfiche WebLink

Home Browse Search

Special Terms and Conditions (1) Ensuring mitigations applied to the system don,t allow end-user modification (2) Not allowing the use of dial-up connections' (3) Using industry standard protocols and solutions for remote access' Examples would include RADIUS and Citrix. (4) Encrypting all remote access traffic from the external workstation to Trusted Network or to a component witnin ihe irusted Network. The tratfic must be encrypted at all times while traversing "ny netwoit<, i..liOing the lnternet, which is not a Trusted Network' (5) Ensuring that the remote access systenr prompl: i"j,l:-"-tillentication or performs arttnmated ' ' session-termination afier no more than 30 minutes of inactlvlty' (6) Ensuring use of Multi-factor Authentication to connect from the external end point to the internal end point. Passwords or PIN codes may meet a lesser standard if used in conjunction with another authentication mechanism, such as a biometii- itingerprint, face recognition, iris scan) or token (software, hardware, smart card, etc') in that case: (1) The PIN or password must be at least 5 letters or numbers when used in conjunction with at least one other authentication factor (2) Must not be comprised of all the same letter or number (11111,22222, aaaaa' would not be acceptable) (3) Must not contain a "run" of three or more consecutive numbers (12398,98743 would not be acceptable) lf the contract specifically allows for the storage of confidential lnformation on a Mobile Device' passcodes used on the device must: (1) Be a minimum of six alphanumeric characters (2) Contain at least three unique character classes (upper case, lower case, letter' number)' (3) Not contain more than a three consecutive character run' Passcodes consisting of 12345' or abcd'12 would not be accePtable' k. Render the device unusable after a maximum of 10 failed logon attempis' Protection of Data. The contractor agrees to store Data on one or more of the following media and protect the Data as described: a. Hard disk drives. For Data stored on local workstation hard disks, access to the Data will be restricted to Authorized User(s) nV ,"qriring iogon to the local workstation using a Unique User lD and Hardened password or other auttreniic"atio"n mechanisms which provide equal or greater security, such as biometrics or smart cards' b. Network server disks. For Data stored on hard disks mounted on network servers and made available through shared folders, """""" to the Data will be restricted to Authorized Users through the use of access control lists which *irigr"nt access only after the Authorized User has authenticateo to in" n"t*o* using a Uni{ue User lD and Hardened Password or other 5. DSHS Cenlral Contract Services 601 7CF Counly Program Agreement (10-31-2017) Page 19