Laserfiche WebLink
DRS DSA # 2026-07 CITY OF EVERETT_UHY <br /> Page 5 of 10 <br /> <br />the performance of the work requiring access to the information as detailed in the <br />Purpose of this Agreement. UHY will protect the Data to prevent unauthorized <br />persons from retrieving information by means of a computer, remote terminal, online <br />access, or other access. <br />ii. Physically securing any computers, documents, or other media that could be used to <br />access the Data. <br />iii. All access to Data accessed or acquired by UHY under the terms of this Agreement, if <br />retained in any manner or format, shall be stored and managed within a secure <br />environment with access limited to the least number of employees needed to <br />complete the purpose of this Agreement. <br />b. All parties will meet the requirements of the State of Washington Office of Cybersecurity’s <br />policies and standards for data security and access controls to ensure the confidentiality, <br />availability, and integrity of all data accessed. <br />c. Protection of Data – UHY agrees to store Data and protect Data as described: <br />i. Workstation storage drives. Access to the Data will be restricted to authorized users <br />by requiring logon to the local workstation using a unique user ID and complex <br />password in addition to Multifactor Authentication (MFA) which provide greater <br />security, such as biometrics, authentication token devices, or smart cards. If the <br />workstation is located in an unsecured physical location, the hard drive must be <br />encrypted using the latest FIPS 140-2 approved encryption algorithm with a minimum <br />key length of 256 bits to protect Data in the event the device is stolen. <br />ii. UHY employees may not store any Data on portable electronic devices or media, <br />including but not limited to: laptops, handheld/PDAs, ultra-mobile PCs, flash <br />memory devices, floppy discs, optical discs (CDs/DVDs), portable hard disks and <br />smart phones at any time. <br />iii. UHY will store the information in an area that is safe from access by unauthorized <br />persons during duty hours as well as non-duty hours or when not in use. <br />iv. UHY will protect the information in a manner that prevents unauthorized persons <br />from retrieving the information by means of computer, remote terminal or other <br />means. <br />v. UHY shall instruct all individuals with access to the Personally Identifiable <br />Information regarding the confidential nature of the information, the requirements of <br />Use of Data and Safeguards Against Unauthorized Access and Re-Disclosure clauses <br />of this Agreement, and the sanctions specified in federal and state laws against <br />unauthorized disclosure of information covered by this Agreement. <br /> <br />Docusign Envelope ID: 261FB988-1AC6-42C0-A96C-9E29D7AE0699