Fully Executed Agreement (2) - Laserfiche WebLink

Home Browse Search

h SPecial Terms and Conditions (d) Apply administrative and physicalsecurity controls to Portable Devices and Portable Media by: i. Keeping them in a Secure Area when not in use' ii. Using check-in/check-out procedures when they are shared' and iii. Taking frequent inventories' (2) when being transported outside of a secure Area, Portable Devices and Portable Media with DSHS Confidential lnformation must be unJer tne'pfrysical control of Contractor staff with authorization to accoos the Data, even if the Data is encrypted' Data stored for backuP Purposes' (1) DSHS Confidential lnformation may be stored on Portable Media as partof a contractor's existing, oo"ur"ni"J ;;;ilp process for business continuity or disaster recovery purposes' such storagu i, "ufirir"J ,jniir sucn time as inai meaia woutd oe reused during the course of normal backup operations. lf backup t"Ui' is retired while DSHS Confidential lnformation still exists upon it, such media will be uestroyeJ "t tnit time in accordance with the disposition requirements below in Section 8 Data Disposition' (2) Datamay be stored on non-portable media (e'g' storage Area Network drives' vir'tual media' etc,) as part of a Contractor's existing, docume-nteA Uait<up process for business continuity or disaster ,.""ou"ry p-u;;;;;. -tf so, sriCn"m"Oia witt be protecied as otherwise described in this exhibit. tt tnis meiia L retired while DSHS confidentiil lnformation still exists upon it' the daia will be destroyed "tlnut time in ...oro"nl *ltn ine oisposition requirements below in section 8 Data DisPosition. cloud storage. DSHS Confidential lnformation requires protections equal to or greater than those specified elsewhere witnintnis exhibit. crorJ sio*de of Data is.problematic as neither DSHS nor the Contractor has .onirot of the environment in which the Data is siored' For this reason: (1)DSHSDatawillnotbestoredinanyconsumergradeCloudsolution,unlessallofthefollowing conditions are met: (a)ContractorhaswrittenproceduresinplacegoverningY:?oftheCloudstorageand contractor attests in writing that all sucn prJceoures will be uniformly followed' (b)TheDatawillbeEncryptedwhilewithintheContractornetwork, (c) The Data will remain Encrypted during transmission to the Cloud' (d)TheDatawillremainEncryptedatalltimeswhileresidingwithintheCloudstoragesolution. (e) The contractor will possess a decryption r,lY Igt the Data, and the decryption key will be possessed only Uy ine Contractor and/or DSHS' (f) The Data will not be downloaded to non-authorized systems' meaning systems that are not on either the DSHS or Contractor networks' (g) The Data will not be decrypted until downloaded onto a computer within the control of an Authorized ur"i ana within either the DSHS or Contractor's network. DSHS Central Contract Services eor ici c"rnty Program Agreement (1 0-3'1-201 7) Page 21