Fully Executed Agreement (2) - Laserfiche WebLink

Home Browse Search

k. Special Terms and Gonditions are not limited to, mobile phones, tablets, and laptops. Mobile Device is a subset of Portable Device. "Portable Media" means any machine readable media that may routinely be stored or moved independently of computing devices. Examples include magnetic tapes, optical discs (CDs or DVDs), flash memory (thumb drive) devices, external hard drives, and internal hard drives that have been removed from a computing device. "secure Area" means an area to which only authorized representatives of the entity possessing the Confidential lnformation have access, and access is controlled through use of a key, card key, combination lock, or comparable mechanism. Secure Areas may include buildings, rooms or locked storage containere (ouoh ae a filing oabinct or dcsk drawer) within a room, as long as access to the Confidential lnformation is not available to unauthorized personnel. ln otherwise Secure Areas, such as an office with restricted access, the Data must be secured in such a way as to prevent access by non-authorized staff such as janitorial or facility security staff, when authorized Contractor staff are not present to ensure that non-authorized staff cannot access it. "Trusted Network" means a network operated and maintained by the Contractor, which includes security controls sufficient to protect DSHS Data on that network. Controls would include a firewall between any other networks, access control lists on networking devices such as routers and switches, and other such mechanisms which protect the confidentiality, integrity, and availability of the Data. m. "Unique User lD" means a string of characters that identifies a specific user and which, in conjunction with a password, passphrase or other mechanism, authenticates a user to an information system. Authority. The security requirements described in this document reflect the applicable requirements of policies and standards of the Washington Technology Services Agency (https://watech.wa.qov/policies?combine=&field cateqories tarqet id=8O&field tvpe tarqet id=All), and oi the DSHS lnformation Security Policy and Standards Manual. Reference material related to these requirements can be found here: https://www.dshs.wa.qov/ffalkeepinq-dshs-client-information- private-and-secure, which is a site developed by the DSHS lnformation Security Office and hosted by DSHS Central Contracts and Legal Services. Administrative Controls. The Contractor must have the following controls in place: a. A documented security policy governing the secure use of its computer network and systems, and which defines sanctions that may be applied to Contractor staff for violating that policy. b. lf the Data shared under this agreement is classified as Category 4 data, the Contractor must be aware of and compliant with the applicable legal or regulatory requirements for that Category 4 Data. c. lf Confidential lnformation shared under this agreement is classified as Category 4 data, the Contractor must have a documented risk assessment for the system(s) housing the Category 4 Data. Authorization, Authentication, and Access. ln order to ensure that access to the Data is limited to authorized staff, the Contractor must: 2 3 4. DSHS Central Contract Services 1 769CS Cou nty Ag reement (1 2-26-2025\ Page 20