OCLC 12/18/2018 - Laserfiche WebLink

process,and other legal requests related to the City of Everett without first notifying the City unless prohibited by law from providing such notice. 7. Termination and Suspension of Service: In the event of termination of the contract,the Service Provider shall implement an orderly return of City of Everett data in CSV or XML or another mutually agreeable format. The Service Provider shall guarantee the subsequent secure disposal of City of Everett data. a) Suspension of services: During any period of suspension or contract negotiation or disputes,the Service Provider shall not take any action to intentionally erase any City of Everett data. b) Termination of any services or agreement in entirety: In the event of termination of any services or agreement in entirety,the Service Provider shall not take any action to intentionally erase any City of Everett data for a period of 90 days after the effective date of the termination.After such 90 day period,the Service Provider shall have no obligation to maintain or provide any City of Everett data and shall thereafter,upon notice from the City of Everett and unless legally prohibited,dispose of all City of Everett data in its systems or otherwise in its possession or under its control as specified in section 7d)below.Within this 90 day timeframe,vendor will continue to secure and back up City of Everett data covered under the contract according to its usual practices. c) Post-Termination Assistance: The City of Everett shall be entitled to any post-termination assistance generally made available with respect to the Services unless a unique data retrieval arrangement has been established as part of the Service Level Agreement. d) Secure Data Disposal: When requested by the City of Everett,the provider shall destroy all requested data in all of its forms,for example: disk,CD/DVD,backup tape,and paper. Data shall be permanently deleted and shall not be recoverable,according to National Institute of Standards and Technology(NIST)approved methods and certificates of destruction shall be provided to the City of Everett. 8. Background Checks: The Service Provider shall conduct criminal background checks and not utilize any staff, including sub-contractors,to fulfill the obligations of the contract who has been convicted of any crime of dishonesty, including but not limited to criminal fraud,or otherwise convicted of any felony or any misdemeanor offense for which incarceration for a minimum of 1 year is an authorized penalty. The Service Provider shall promote and maintain an awareness of the importance of securing the City's information among the Service Provider's employees and agents. 9. Data Dictionary: Prior to go-live,the Service Provider shall provide a data dictionary. 10. Security Logs and Reports: The Service Provider shall allow the City of Everett access to system security logs that affect this engagement,its data and or processes.This includes the ability for the City of Everett to request a report of the records that a specific user accessed over a specified period of time. Maintenance of ISO/IEC 27001 certification shall satisfy this clause. 11. Contract Audit: The Service Provider shall allow the City of Everett to audit conformance including contract terms, system security and data centers as appropriate.The City of Everett may perform this audit or contract with a third party at its discretion at the City's expense. Such reviews shall be conducted with at least 30 days advance written notice and shall not unreasonably interfere with the Service Provider's business. Maintenance of ISO/IEC 27001 certification shall satisfy this clause. 12. Sub-contractor Disclosure: The Service Provider shall identify all of its strategic business partners related to services provided under this contract, including but not limited to, all subcontractors or other entities or individuals who may be a party to a joint venture or similar agreement with the Service Provider,who will be involved in any application development and/or operations. 13. Operational Metrics: The Service Provider and the City of Everett shall reach agreement on operational metrics and document said metrics in the Service Level Agreement. Examples include but are not limited to: a) Advance notice and change control for major upgrades and system changes b) System availability/uptime guarantee/agreed-upon maintenance downtime c) Recovery Time Objective/Recovery Point Objective d) Security Vulnerability Scanning Everett Public Library 20170701 Page 11 of 13 OCLC Master Services Agreement