Fully Executed Agreement (2) - Laserfiche WebLink

Home Browse Search

d e f Special Terms and Conditions authentication mechanisms which provide equal or greater security, such as.biometrics or smart cards, Data on disks mounted to such."ru"-o-tr.ibe located in an areawhich is accessible only to authorized personnel, with access .onttott"U tniough use of a key, card key' combination lock' or comparable mechanism' For DSHS Confidential lnformation stored on these disks, deleting unneedeo Da!3 is sufficient as long as the disks l."rnrin in a secure Area and otherwise meet the requirements listed in the above paragraph. oestructiJn oitn" o"tt, as outtineo below in Section 8 Data Disposition' may be deferred untilthe disks are retired, replaced, or otherwise taken out of the secure Area' Optical discs (GDs or DVDs) in localworkstation optical disc drives' Data provided by DSHS on optical dlscs whiclr *itl t * used in localworl<station optical disc clrives and which will not be iransported out of a Secure Area' When not in use for the contracted purpose' such discs must be Stored in a Secure nr"a. Worf<stations wnicn access DSHS Data on optical discs must be located in an area which is accessible only to "utf,oiiz"J per"onnel, with access controlled through use of a ["V, ""Jr."y, combination lock, or comparable mechanism' Opticaldiscs (CDs or DVDs) in drives or jukeboxes.attached to servers' Data provided by DSHS on optical Oiscs wfrlcy, *itt n" attachei to network servers and which will not be transported out of a secure nrea.-Rccess to Data on tnese discs will be restricted to Authorized Users through the use of access controi iists wlrich will grant access only afier the Authortzed User has authentlcated to the network using a unique User lD and Hardened Password or other authentication mechanisms which provide "quir o1" greater s.ecurity, such as.biometrics or smart cards. Data on discs attached to such t"tl-i. tr.ibe located in an area which is accessible only to authorized personnel, with acces= controlled through use of a key' card key' combination lock' or comparable mechanism. Paper documents. Any paper records must be protected by storing the records in a secure Area which is only accessible to authorized personnel" When not in use,iuch records must be stored in a Secure Area. Remote Access. Access io and Use of the Data over the state Governmental Network (sGN) or Secure Access Wasfringion-(aAry will be co*iolted by DSHS staff who will issue authentication credentials (e.g. a Unique User lD anO larOenuJ puss*orO) to Authorized Users on Contractor's staff. contractor will notifu DSHS staff immediately whenever an Authorized User in possession of such credentials is terminated or otherwise ieaves'the employ of the Contractor' and whenever an Authorized User's Ouii"t "n"tg" such that the Authorized User no longer requires access to perform work for this Contract. Data storage on portable devices or media' (1) Except where otherwise specified herein, DSHS Data shallnot be stored by the contractor on portable devices oi t"ai" unless speciticalty authorized within the terms and conditions of the Contract. ff so "uinoited, the Data shall be given the following protections: (a) EncryPt the Data. (b) control access to devices with a Unique User lD and Hardened Password or stronger authenticationmethodsuchasaphysicaltokenorbiometrics. (c) Manually lock devices whenever they are left u.nattended and set devices to lock automaticallyafteraperiodofinactivity,ifthisfeatureisavailable,Maximumperiodof inactivitY is 20 minutes. DSHS Central Contract Services ailtcf county Program Agreement (10-31-201 7) Page 20