Laserfiche WebLink
DOR Contract No. I<2052 <br /> b) If the workstation is not located in secure physical location, the hard drive must <br /> be encrypted. <br /> c) Workstations must be maintained with current anti-malware or anti-virus <br /> software. <br /> d) Software and operating system security patches on workstations must be kept <br /> current. <br /> e) Manually lock workstations when left unattended and set workstations to lock <br /> automatically after a period of inactivity. Maximum period of inactivity is 20 <br /> minutes. <br /> 2) Network servers <br /> a) Access to data stored on hard disks mounted on network servers and made <br /> available through shared folders will be restricted to authorized users through <br /> the use of access control lists which will grant access only after the authorized <br /> user has authenticated to the network using a unique user ID and complex <br /> password, passphrase, or other authentication mechanism which provide equal <br /> or greater security, such as biometrics or smart cards. <br /> b) Data on disks mounted to such servers must be located in a secure physical <br /> location. <br /> c) Servers must be maintained with current anti-malware or anti-virus software. <br /> d) Software and operating system security patches on servers must be kept current. <br /> 3) Optical discs (e.g., CDs, DVDs, Blu-Rays) <br /> a) Data on optical discs will be used in local workstation or server optical disc drives <br /> and will not be transported out of a secure physical location. <br /> b) When not in use for the Agreement purpose, such discs must be locked in a <br /> drawer, cabinet or other container to which only authorized users have the key, <br /> combination or mechanism required to access the contents of the container. <br /> c) Workstations or servers which access Department data on optical discs must be <br /> located in a secure physical location. <br /> 4) Backup tapes or backup media <br /> a) The City may archive Department data for disaster recovery (DR) or data <br /> recovery purposes. <br /> b) Backup devices, tapes, or media must be kept in a secure physical location. <br /> c) Backup tapes and media must be encrypted if transported offsite. <br /> d) When being transported outside of a secure physical location, tapes or media <br /> must be under the physical control of staff with authorization to access the data <br /> or transported by a secure courier contracted by the City for transportation <br /> purposes. <br /> CITY DATA SHARING AGREEMENT Page 7 <br />