PUBLIC AND NON-PUBLIC DATA OWNED BY THE STATE OF DELAWAREXaas Contract • September 27th, 2018
Contract Type FiledSeptember 27th, 2018Public Data NonPublic Data Cloud Services (CS) Terms PROVIDER must satisfy Clause CS1-A OR Clauses CS1-B and CS1-C, AND Clause CS4 for all engagements involving non-public data.Clause CS2 is mandatory for all engagements involving non-public data.Clause CS3 is only mandatory for SaaS or PaaS engagements involving non-public data. CS1-A Security Standard Compliance Certifications: The PROVIDER shall meet, and provide proof of, one or more of the following Security Certifications. CSA STAR – Cloud Security Alliance – Security, Trust & Assurance Registry (Level Two or higher) FedRAMP - Federal Risk and Authorization Management Program CS1-B Background Checks: The PROVIDER must warrant that they will only assign employees and subcontractors who have passed a state-approved criminal background checks. The background checks must demonstrate that staff, including subcontractors, utilized to fulfill the obligations of the contract, have no convictions, pending criminal charges, o