Laserfiche WebLink
Agency DSA 22-01 <br />DSA Agreement between Agency and SAO <br />Agency DSA: 22-01 <br />“Data Access” refers to rights granted to SAO employees to directly connect to Agency systems, <br />networks and/ or applications combined with required information needed to implement these <br />rights. <br />“Data Transmission” refers to the methods and technologies to be used to move a copy of the data <br />between systems, networks and/ or employee workstations. <br />“Data Storage” refers to the place data is in when at rest. Data can be stored on removable or <br />portable media devices such as a USB drive or SAO managed systems or OCIO/ State approved <br />services. <br />“Data Encryption” refers to enciphering data with a NIST-approved algorithm or cryptographic <br />module using a NIST-approved key length. Encryption must be applied in such a way that it <br />renders data unusable to anyone but the authorized users. <br />“Personal Information” means information defined in RCW 42.56.590(10). <br />The State classifies data into categories based on the sensitivity of the data pursuant to the <br />Security policy and standards promulgated by the Office of the state of Washington Chief <br />Information Officer. The Data that is the subject of this DSA is classified as indicated below: <br />Category 1 – Public Information Public information is information that can be or <br />currently is released to the public. It does not need protection from unauthorized <br />disclosure, but does need integrity and availability protection controls. <br />Category 2 – Sensitive Information Sensitive information may not be specifically <br />protected from disclosure by law and is for official use only. Sensitive information is <br />generally not released to the public unless specifically requested. <br />Category 3 – Confidential Information Confidential information is information that is <br />specifically protected from disclosure by law. It may include but is not limited to: a. <br />Personal Information about individuals, regardless of how that information is obtained; b. <br />Information concerning employee personnel records; c. Information regarding IT <br />infrastructure and security of computer and telecommunications systems; <br />Category 4 – Confidential Information Requiring Special Handling Confidential <br />information requiring special handling is information that is specifically protected from <br />disclosure by law and for which: a. Especially strict handling requirements are dictated, <br />such as by statutes, regulations, or agreements; b. Serious consequences could arise from <br />unauthorized disclosure, such as threats to health and safety, or legal sanctions. <br />3.PERIOD OF AGREEMENT <br />This agreement shall begin on July 1, 2024, or date of execution, whichever is later, and end on <br />June 30, 2027, unless terminated sooner or extended as provided herein.