|
SPecial Terms and Conditions
<br />i. ,,Mobile Device" means a computing device, typically smaller than a notebook, which runs a mobile
<br />operating system, such as iOS, Android, or Windows Phone. Mobile Devices include smart phones,
<br />most tablets, and other form factors.
<br />j. .Multi-factor Authentication" means controlling access to computers and other lT resources by
<br />requiring two or more pieces of evidence thaithe user is who they claim to be. These pieces of
<br />evidence consist of something the user knows, such as a password or PIN; something the user-has
<br />such as a key card, smart card, or pn'sicif token; and. something the user is, a biometric identifier
<br />such as a fingerprint, facial scan, or retinat scan. i'PlN" means a personal identification number, a
<br />series of numbers which act as a pasiworo for a device. Since PlNs are typically only four to six
<br />characters, plNs are usually used in conjunction with another factor of authentication, such as a
<br />fingcrprint.
<br />k. ,,portable Device" means any computing device with a smallform factor, designed to be transported
<br />from place to ptace. portable devices a-re primarily battery powered devices with base computing
<br />resources in the form of a processor, memory, stoiage, and network access' Examples include' but
<br />are not limited to, mobile inon"t, tablets, anO taptop!. Mobile Device is a subset of Portable
<br />Device.
<br />l. ,,Portable Media" means any machine readable media that may routinely be.stored or moved
<br />independently of computing devices. Examples include magnetic tapqg' optical discs (CDs or
<br />DVDs), flash memory (thumb drive) devices, external hard drives, and internal hard drives that have
<br />been removed from a computing device'
<br />m. ,,Secure Area,, means an area to which only authorized representatives of the entity possessing the
<br />Confidential lnformation have access, and access is controlled through use oJa key, card key,
<br />combination lock, or comparable mechanism. secure Areas may include buildings, rooms or
<br />locked storage containers (such as a filing cabinet or desk drawer) within a room, as long as access
<br />to the confidential lnformation is not avaii-able to unauthorized personnel. ln otherwise secure
<br />Areas, such as an office with restricted access, the Data must be secured in such a way as to
<br />prevent access by non-authorized staff such as janitorial or facility security staff, when authorized
<br />Contractor staff are not present to ensure that non-authorized staff cannot access it'
<br />n. .Trusted Network" means a network operated and maintained by the Contractor, which includes
<br />security controls sufficient to protect OSHS Data on that network. Controls would include a firewall
<br />between any other networks, access control lists on networking devices.such.as routers and
<br />switches, and other such mechanismi which protect the confid-entiality, integrity, and availability of
<br />the Data.
<br />o. ,,Unique User lD" means a string of characters that identifies a specific user and which, in
<br />conjunction with a password, pJssphrase or other mechanism, authenticates a user to an
<br />information sYstem.
<br />2 Authority. The securitY requi
<br />policies and standards of the
<br />rements described in this
<br />Washington TechnologY
<br />document reflect the applicable requirements of
<br />Services AgencY
<br />3.Administrative controls. The contractor must have the following controls in place:
<br />DSHS Central Contract Services
<br />6017CF County Program Agreement (10-31-2017)Page 17
|