Laserfiche WebLink
4 <br /> B. Protection of Data. <br /> The Agency agrees to store data on one (1) or more of the following media and <br /> protect the data as described: <br /> 1. Hard disk drives. Data stored on local workstation hard disks. Access to <br /> the data will be restricted to authorized users by requiring logon to the local <br /> workstation using a Unique User ID and Hardened Password or other <br /> authentication mechanisms that provide equal or greater security, such as <br /> biometrics or smart cards. <br /> 2. Network server disks. Data stored on hard disks mounted on network <br /> servers and made available through shared folders. Access to the data will <br /> be restricted to authorized users through the use of access control lists that <br /> will grant access only after the authorized user has authenticated to the <br /> network using a Unique User ID and Hardened Password or other <br /> authentication mechanisms that provide equal or greater security, such as <br /> biometrics or smart cards. Data on disks mounted to such servers must be <br /> located in an area which is accessible only to authorized personnel, with <br /> access controlled through use of a key, card key, combination lock or <br /> comparable mechanism. <br /> 3. For confidential data stored on these disks, deleting unneeded data is <br /> sufficient as long as the disks remain in a secured area and otherwise meets <br /> the requirements listed in the above paragraph. Destruction of the data as <br /> outlined in Section D. Data Disposition may be deferred until the disks are <br /> retired, replaced or otherwise taken out of the secure environment. <br /> 4. Optical discs (CDs or DVDs) in local workstation optical disc drives. <br /> Data provided by the County on optical discs that will be used in local <br /> workstation optical disc drives and that will not be transported out of a <br /> secure area. When not in use for the contracted purpose, such discs must <br /> be locked in a drawer, cabinet or other container to which only authorized <br /> users have the key, combination or mechanism required to access the <br /> contents of the container. Workstations that access said data on optical <br /> discs must be located in an area that is accessible only to authorized <br /> personnel, with access controlled through use of a key, card key, <br /> combination lock, or comparable mechanism. <br /> 5. Optical discs (CDs or DVDs) in drives or jukeboxes attached to <br /> servers. Data provided by the County on optical discs that will be attached <br /> to network servers and that will not be transported out of a secure area. <br /> Access to data on these discs will be restricted to authorized users through <br /> the use of access control lists that will grant access only after the authorized <br /> user has authenticated to the network using a Unique User ID and <br /> Hardened Password or other authentication mechanisms which provide <br /> Business Associate Agreement <br /> BAA-2018-101-198 <br /> City of Everett <br /> Page 8 of 13 <br /> 64 <br />