Laserfiche WebLink
EDD Agreement No. 0000000399 <br />EDD/Santa Ana Police Department <br />EDD Customer Codes; E00642, E00663 <br />Page 3 of 3 <br />EXHIBIT E <br />(Standard Agreement) <br />unauthorized persons. Process and store information in electronic format, such as magnetic tapes or <br />discs, in such a way that unauthorized persons cannot retrieve the information by means of computer, <br />remote terminal, or other means. <br />b. Secure and maintain any computer systems (network, hardware, and software applications) that will be <br />used in the performance of this Agreement. This includes ensuring that all security patches, upgrades, <br />and anti -virus updates are applied as appropriate to secure data that may be used, transmitted, or <br />stored on such systems in the performance of this Agreement, <br />c. Store all the EDD's confidential documents in a physically secure manner at all times to prevent <br />unauthorized access, <br />d. Store the EDD's confidential electronic records in a secure central computer facility, Where in -use on a <br />shared computer system or any shared data storage system, ensure appropriate information security <br />protections are in place. The EDD Data Recipient shall ensure that appropriate security access <br />controls, storage protections and use restrictions are in place to keep the confidential Information in the <br />strictest confidence and shall make the information available to its own personnel on a "need -to -know" <br />basis only. <br />e. Store the EDD's confidential data In encrypted format when recorded on removable electronic storage <br />media, or on mobile computing devices such as a laptop computer. <br />f. Maintain an audit trail and record data access of authorized users and authorization level of access <br />granted to the EDD's data, based on Job function. <br />g. Direct all personnel permitted to use the EDD's data to avoid leaving the data displayed on their <br />computer screens where unauthorized users may view it, Personnel should retrieve computer printouts <br />as soon as they are generated so that the EDD's data is not left unattended in printers where <br />unauthorized personnel may access them. <br />h. Dispose of confidential information obtained from the EDD, and any copies thereof made by the EDD <br />Data Recipient, after the purpose for which the confidential information is disclosed is served. Disposal <br />means return of the confidential Information to the EDD or destruction of the Information utilizing an <br />approved method of confidential destruction, which Includes electronic deletion (following Department <br />of Defense specifications) shredding, burning, or certified or witnessed destruction. <br />Confidentlalily Requirements (Rev 10-2022) <br />