Common use of Server Security Clause in Contracts

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 37 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 1 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 2 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 34 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 35 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 36 upon a risk assessment/system security review.. 37 // 7 of 14 EXHIBIT B

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 36 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 37 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 7 of 14 EXHIBIT B 1 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 16 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 17 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 18 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 29 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 30 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 31 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 22 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 23 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 25 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 26 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 34 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 35 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 36 upon a risk assessment/system security review.. 37 //

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 20 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 21 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 26 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 27 upon a risk assessment/system security review.. 7 of 14 EXHIBIT B 1 //

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 16 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 17 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 18 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 19 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 20 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 17 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 18 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 19 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY 23 discloses to 33 CONTRACTOR ACS or CONTRACTOR ACS creates, receives, maintains, or 24 transmits on behalf of COUNTY 34 must have sufficient administrative, physical, 25 and technical controls in place to protect that data, based 35 upon a risk 26 assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 31 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 32 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 33 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 35 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 36 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 37 upon a risk assessment/system security review.. County of Orange, Health Care Agency 7 of 14 Contract MA-042-22010739

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 28 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 29 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 30 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 24 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 25 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 26 upon a risk assessment/system security review.

Server Security. Servers containing unencrypted PHI COUNTY discloses to 33 22 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 34 23 must have sufficient administrative, physical, and technical controls in place to protect that data, based 35 24 upon a risk assessment/system security review.