Laserfiche WebLink
DRS DSA # 2026-07 CITY OF EVERETT_UHY <br /> Page 6 of 10 <br /> <br />d. Data Separation <br />i. DRS data and City of Everett data must be separated or otherwise distinguishable <br />from non-City of Everett and non-DRS data. This is to ensure that when no longer <br />needed by UHY, all DRS data and City of Everett data can be identified for return or <br />destruction. It also aids in determining whether DRS data or City of Everett data has <br />or may have been compromised in the event of a security breach. <br />ii. DRS data and City of Everett data will be kept on media (e.g. hard disk, optical disc, <br />tape, etc.) which will contain no non-DRS data and non-City of Everett data. Or, <br />iii. DRS data and City of Everett data will be stored in a logical container on electronic <br />media, such as a partition or folder dedicated to DRS data and City of Everett data. <br />Or, <br />iv. DRS data and City of Everett data will be stored in a database which will contain no <br />non-DRS data and non-City of Everett data. Or, <br />v. DRS data and City of Everett data will be stored within a database and will be <br />distinguishable from non-DRS data and non-City of Everett data by the value of a <br />specific field or fields within database records. Or, <br />vi. When stored as physical paper documents, DRS data and City of Everett data will be <br />physically separated from non-DRS data and non-City of Everett data in a drawer, <br />folder, or other container that is secured against unauthorized access. <br />vii. When it is not feasible or practical to separate DRS data and City of Everett data from <br />non-DRS data and non-City of Everett data, then both the DRS data and City of <br />Everett data the non-DRS data and non-City of Everett data with which it is <br />commingled must be protected as described in this Agreement. <br />If UHY or its agents detect a compromise or potential compromise in the IT security for this data <br />such that Confidential Information may have been accessed or disclosed without proper <br />authorization, UHY shall give notice to DRS and City of Everett within twenty-four (24) hours of <br />discovering the compromise or potential compromise. Notice to DRS can be by phone with <br />follow-up email if unable to speak to a live person. Contacts for purposes of this section are: <br /> Chief Information Security Officer <br /> Gary Nicholas, (360) 664-7057, gary.nicholas@drs.wa.gov <br /> Information Services Division Assistant Director <br /> Jay Walsh, (360) 664-7266 or (m) (360) 701-3723, jay.walsh@drs.wa.gov <br /> Please cc: Risk Management Director <br /> Julie Amos, (360) 664-7983, julie.amos@drs.wa.gov <br />UHY shall take corrective action as soon as practicable to eliminate the cause of the breach and <br />shall be responsible for managing the incident response, as required by law or regulation, <br />Docusign Envelope ID: 261FB988-1AC6-42C0-A96C-9E29D7AE0699