Isolation of System or Device. A system or device, containing County CSP, compromised by an Incident and/or Breach involving an exploitation of a technical vulnerability, shall be promptly disconnected from CDSS’ production environment with access to only individuals who are participating in the investigation, mitigation, and remediation of the Incident and/or Breach. Such system or device shall remain disconnected from the production environment until the risk from the exploited vulnerability has been adequately mitigated. The County must be contacted prior to placing the previously compromised system or device, containing County CSP, back in the production environment. The affected system or device, containing County CSP, shall not be returned to operation in the production environment until the County Information Security and/or Privacy Officer gives its approval.
Isolation of System or Device. A system or device containing CDSS CSP compromised by an exploitation of a technical vulnerability shall be promptly disconnected or quarantined and investigated until the vulnerability is resolved. Contractor will notify CDSS CSP within two (2) business days of a confirmed exploitation of a technical vulnerability and keep CDSS informed as to the investigation until resolution of the vulnerability is completed.
Isolation of System or Device. A system or device, containing CDSS CSP, compromised by an Incident and/or Breach involving an exploitation of a technical vulnerability, shall be promptly disconnected from Contractor’s production environment with access to only individuals who are participating in the investigation, mitigation, and remediation of the Incident and/or Breach. Such system or device shall remain disconnected from the production environment until the risk from the exploited vulnerability has been adequately mitigated. CDSS must be contacted prior to placing the previously compromised system or device, containing CDSS CSP, back in the production environment. The affected system or device, containing CDSS CSP, shall not be returned to operation in the production environment until the CDSS Information Security and Privacy Officer gives its approval.
