Laserfiche WebLink
6 <br />SPecial Terms and Conditions <br />(2)DatawillnotbestoredonanEnterpriseCloudstoragesoluttonunlesseither: <br />(a)TheCloudstorageprovideristreatedasanyotherSub-Contractor,andagreesinwritingto <br />all of the requirements within this exhibit; or' <br />(b) The Cloud storage solution used is FedRAMP certified' <br />(3)lftheDataincludesprotectedhe^althinformationcoveredbytheHealthlnsurancePortabilityand <br />Accountability Act (HlpAA), the cloui piouial'. must sign a Business Associate Agreement prior <br />to Data being stored in their Cloud solution' <br />System Protection. 1o prevent comptomise uf systems which contain DSHS Data or ihrough Which <br />that Data Passes; <br />a'SystemscontainingDsHsDatamusthaveallsecuritypatchesorhotfixesappliedwithin3months <br />of being made available' <br />b, The contractor will have a method of ensuring that the requisite patches and hotfixes have been <br />applied within the required timeframes' <br />c. Systems containing DSHS Data shall have an Anti-Malware application, if available, insialled' <br />d. Anti.Malware software shall be kept up to date. The product, its anti.virus engine, and any malware <br />databasethesystemuses,willbe'nomorethanoneupdatebehindcurrent. <br />Data Segregation. <br />a.DsHsDatamustbesegregatedorotherwisedistinguishablefromnon-DSHSdata.Thisisto <br />ensure that when no longer needed by tre bontru"6r, all DSHS Data can be identified for return or <br />destruction. lt also aids in determining *n"inur osHs oata has or may have been.compromised in <br />the event of a security breach. ns ,u"n,'ln" oi t"t" of the following methods will be used for data <br />segregation. <br />(1) DSHS Data will be kept on media (e'g <br />non-DSHS Data' And/or, <br />hard disk, optical disc, tape, etc') which will contain no <br />(2)DSHSDatawillbestoredinalogicalcontaineronelectronicmedia,suchasapartitionorfolder <br />dedicated to DSHS Data' And/or, <br />(3) DSHS Data will be stored in a database which will contain no non-DSHS data' And/or' <br />(4) DSHS Data will be stored within a database and will be distinguishable from non-DSHS data by <br />the value ot a specific field or fields within database records' <br />(5) When stored as physical pa.per documents, DSHS Data will be physically segregated from non- <br />DSHS data in a drawer, folder, or other container' <br />when it is not feasible or practicalto segregate DSHS Data from non-DSHS data' then both the <br />DSHS Data and the non-DSHS data witn wiilnitis "orrlngled must be protected as described in <br />7 <br />b. <br />this exhibit. <br />8.Data Disposition. when the contracted work has been completed or when the Data is no longer <br />needed, except ", noi"J above in Section ;';, D;; shall oe returned to DSHS or destroyed' Media on <br />which Data may be =to-r"J"na "ssociated <br />,"""ptrUtu methods of destruction are as follows: <br />DSHS Central Contract Services <br />aiitcf county Program Agreement (10-31-2017) <br />Page 22