Access Restrictions. Contractor shall restrict the use of, and access to, administrative credentials for City accounts and Contractor’s systems to only those of Contractor’s employees and other agents whose access is essential for the purpose of providing the services of this Agreement. Contractor shall require these personnel to log on using an assigned user-name and password when administering City accounts or accessing City Data. These controls must enable Contractor to promptly revoke or change access in response to terminations or changes in job functions, as applicable. Contractor shall encrypt all passwords, passphrases, and PINs, using solutions that are certified against U.S. Federal Information and Processing Standard 140-2, Level 2, or equivalent industry standard, and verify that the encryption keys and keying material are not stored with any associated data. Contractor will implement any City request to revoke or modify user access within twenty-four (24) hours or the next business day of receipt of City’s request. Contractor will disable user accounts after at most ten (10) consecutive invalid authentication attempts.
Appears in 5 contracts
Samples: Professional Services, Professional Services, Professional Services
