Laserfiche WebLink
4 <br /> R <br /> F <br /> equal or greater security, such as biometrics or smart cards. Data on discs II <br /> attached to such servers must be located in an area which is accessible <br /> only to authorized personnel, with access controlled through use of a key, i <br /> card key, combination lock, or comparable mechanism. <br /> 6. Paper documents. Paper records must be protected by storing the records <br /> in a secure area that is only accessible to authorized personnel. When not <br /> in use, such records must be stored in a locked container, such as a file <br /> cabinet, locking drawer, or safe to which only authorized persons have <br /> access. 1 <br /> 1 <br /> 7. Data storage on portable devices or media. <br /> a. County data shall not be stored by the Agency on portable devices or <br /> media unless specifically authorized within the Specific Terms and <br /> Conditions of the Contract. If so authorized, the data shall be given the <br /> 1 <br /> following protections: P <br /> 1) Encrypt the data with a key length of at least 128 bits; <br /> t <br /> 2) Control access to devices with a Unique User ID and Hardened <br /> Password or stronger authentication method such as a physical t: <br /> token or biometrics; <br /> 3) Manually lock devices whenever they are left unattended and set <br /> devices to lock automatically after a period of inactivity, if this feature i! <br /> is available. Maximum period of inactivity is 20 minutes; <br /> i <br /> 4) Physically protect the portable device(s) and/or media by: e <br /> I <br /> a) Keeping them in locked storage when not in use; <br /> i <br /> b) Using check-in/check-out procedures when they are shared; and 1 <br /> s <br /> c) Taking frequent inventories. f <br /> 1 <br /> b. When being transported outside of a secure area, portable devices and <br /> media with confidential County data must be under the physical control I <br /> of Agency staff with authorization to access the data. <br /> c. Portable devices include, but are not limited to: smart phones, tablets, <br /> flash memory devices (e.g., USB flash drives, personal media players), , <br /> portable hard disks and laptop/notebook/netbook computers if those <br /> computers may be transported outside of a secure area. <br /> i <br /> i <br /> Business Associate Agreement <br /> BAA-2018-101-198 4 <br /> City of Everett <br /> Page 9 of 13 <br /> i <br /> 65 <br /> 1 <br />