Cloud storage Sample Clauses
Cloud storage. DSHS Confidential Information requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DSHS nor the Contractor has control of the environment in which the Data is stored. For this reason:
(1) DSHS Data will not be stored in any consumer grade Cloud solution, unless all of the following conditions are met:
(a) Contractor has written procedures in place governing use of the Cloud storage and Contractor attests in writing that all such procedures will be uniformly followed.
(b) The Data will be Encrypted while within the Contractor network.
(c) The Data will remain Encrypted during transmission to the Cloud.
(d) The Data will remain Encrypted at all times while residing within the Cloud storage solution.
(e) The Contractor will possess a decryption key for the Data, and the decryption key will be possessed only by the Contractor and/or DSHS.
(f) The Data will not be downloaded to non-authorized systems, meaning systems that are not on either the DSHS or Contractor networks.
(g) The Data will not be decrypted until downloaded onto a computer within the control of an Authorized User and within either the DSHS or Contractor’s network.
(2) Data will not be stored on an Enterprise Cloud storage solution unless either:
(a) The Cloud storage provider is treated as any other Sub-Contractor, and agrees in writing to all of the requirements within this exhibit; or,
(b) The Cloud storage solution used is FedRAMP certified.
(3) If the Data includes protected health information covered by the Health Insurance Portability and Accountability Act (HIPAA), the Cloud provider must sign a Business Associate Agreement prior to Data being stored in their Cloud solution.
Cloud storage. 9.17.15.1 Subrecipient and its Lower Tier Subrecipient(s) may not utilize cloud storage of County Information Assets without the prior express written authorization of County, after a review of the cloud service by County or its designee(s).
Cloud storage. DSHS Confidential Information requires protections equal to or greater than those specified elsewhere within this Attachment. Cloud storage of Data is problematic as neither DSHS nor the Contractor has control of the environment in which the Data is stored. For this reason:
Cloud storage. Data requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DCYF nor the Contractor has control of the environment in which the Data is stored. For this reason:
(1) Data will not be stored in any consumer grade Cloud solution, unless all of the following conditions are met:
(a) Contractor has written procedures in place governing use of the Cloud storage and Contractor attests in writing that all such procedures will be uniformly followed;
(b) The Data will be Encrypted while within the Contractor network; (c). The Data will remain Encrypted during transmission to the Cloud;
Cloud storage. Use the cloud provider’s procedures to permanently delete the files and folders.
Cloud storage. DSHS/County Confidential Information requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DSHS, the County, nor the Contractor have control of the environment in which the Data is stored. For this reason:
9.8.1. DSHS/County Data will not be stored on any consumer grade Cloud solution, unless all of the following conditions are met:
a. Contractor has written procedures in place governing the use of the Cloud storage and the Contractor attests in writing that all such procedures will be uniformly followed
b. The Data will be encrypted while within the Contractor network
c. The Data will remain encrypted during transmission to the Cloud
i. The Data will remain encrypted at all times while residing within the Cloud storage solution.
ii. The Contractor will possess a decryption key for the Data, and the decryption key will be possessed only by the Contractor and/or the County and DSHS.
iii. The Data will not be downloaded to non-authorized systems, meaning systems that are not either the County, DSHS or Contractor networks.
iv. The Data will not be decrypted until downloaded onto a computer within the control of an Authorized User and within either the County, DSHS, or Contractor’s network.
9.8.2. Data will not be stored on an Enterprise Cloud storage solution unless either:
a. The Cloud storage provider is treated as any other Sub-Contractor and agrees in writing to all of the requirements within this exhibit, or
b. The Cloud storage solution used is FedRAMP certified
9.8.3. If the Data includes protected health information (PHI) covered by HIPPA, the Cloud provider must sign a Business Associate Agreement prior to Data being stored in their Cloud solution.
Cloud storage. Data requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DCYF nor the Contractor has control of the environment in which the Data is stored. For this reason:
Cloud storage. The cloud server will also check the user’s identity before issuing the corresponding file to the user. During file access the user key has to match by the group manager and the requested file can be downloaded by the group users.
Cloud storage. The Service does not include any device necessary for receipt of the digital feed. Customer acknowledges that its use of the Service requires Customer to have access to the Internet to use an internet-connected device capable of receiving the digital feed of Content provided by MPC. Customer agrees to keep access to the Content stored in such a way that it is protected by password. Customer is solely responsible for the security of the password Customer uses to access its Content and the activities of all persons whom access the Content.
Cloud storage. If DSHS Confidential data will be stored in the cloud, the data must be encrypted at rest and transit, and the cloud provider must not possess the key(s) required to decrypt the data. Encryption keys must be held by DSHS or the Contractor. Contractor will be responsible for providing the DSHS Information Security Office with a comprehensive enumeration of the administrative, physical, and technical controls used by the cloud provider to securely store the DSHS data. If the DSHS Confidential data includes HIPAA data, then a Business Associates Agreement must be executed with the cloud provider prior to storage of the data with the cloud provider.