CONDITION FOR RECEIVING FUNDS. The County may seek reimbursement for the activities identified above, provided that the County certifies as part of the reimbursement claim that it has done all of the following: 1. Utilized the Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) no cost Cyber Hygiene Web Application Scanning service, or other equivalent cyber hygiene scanning service (xxxxx://xxx.xxxx.xxx/news-events/news/cyber- hygiene-web-application-scanning). 2. At least one County employee or agent attended one of the regional tabletop training sessions sponsored by the Secretary of State or CISA. 3. Conducted privacy and security awareness training including cyber security best practices for all elections related staff. 4. Completed an incident response plan detailing how elections staff detect, respond to, and recover from network security incidents. In addition, as a condition of receiving reimbursement for the activities identified above, the County shall certify as a condition of reimbursement that the County has done one or more of the following: 5. Deployed reliable antivirus software and kept it up to date. 6. Implemented a firewall and kept it up to date. 7. Deployed an intrusion detection system and kept it up to date. 8. Deployed the Elections Infrastructure Information Sharing & Analysis Center (EI-ISAC) Endpoint Detection Response program, or other equivalent end point protection and is kept up to date (xxxxx://xxx.xxxxxxxxxx.xxx/insights/spotlight/cybersecurity-spotlight- endpoint-detection-and-response-edr). 9. Adopted a .gov Top-Level Domain or are currently in the transition process (xxxxx://xxx.xxx/registration/) for obtaining a .gov Top-Level Domain. Invoices must include itemized list of costs prior to reimbursement.
Appears in 4 contracts
Samples: Help America Vote Act Agreement, Help America Vote Act Agreement, Funding Agreement
