PUBLIC AND NON-PUBLIC DATA OWNED BY THE STATE OF DELAWAREXaas Contract • April 16th, 2019
Contract Type FiledApril 16th, 2019Public Data Non PublicData Cloud Services (CS) Terms PROVIDER must satisfy Clause CS1-A OR Clauses CS1-B and CS1-C, AND Clause CS4 for all engagements involving non-public data.Clause CS2 is mandatory for all engagements involving non-public data.Clause CS3 is only mandatory for SaaS or PaaS engagements involving non-public data. CS1-A ✔ Security Standard Compliance Certifications: The PROVIDER shall meet, and provide proof of, one or more of the following Security Certifications.• CSA STAR – Cloud Security Alliance – Security, Trust & Assurance Registry (Level Two or higher)• FedRAMP - Federal Risk and Authorization Management Program CS1-B ✔ Background Checks: The PROVIDER must warrant that they will only assign employees and subcontractors who have passed a state-approved criminal background checks. The background checks must demonstrate that staff, including subcontractors, utilized to fulfill the obligations of the contract, have no convictions, pending criminal charges, o