ORANGE, COUNTY OF (53) - Laserfiche WebLink

Home Browse Search

5) Contractor shall conduct an Investigation of the Incident(s) and shall share the report of the investigation with the County.The County and/or its authorized agents shall have the right to lead(if required by law)or participate in the investigation, Contractor shall cooperate fully with the County,its agents and law onforcenient. 6) After any significant Data loss or Data Breach or as a result of any disaster or catastrophic failure, Contractor will at its expense have an independent, industry-recognized, County- approved third party perform an information security audit. The audit results shall be shared with the County within seven(7)days of Contractor's receipt of such results. Upon Contractor receiving the results of the audit,Contractor will provide the County with written evidence of planned remedfation within thirty(30)days and promptly modify its security measures in order to meet its obligations Linder this Contract. Corrective Action In the event any goods or service provided by the Contractor in the performance of the Contract should fail to conform to the requirements in this Contract, it shall become the duty of the Contractor to immediately advise the County of the failure and correct the performance of goods or services, without expense to the County, If corrective action (including but not limited to patches, bug fixes, updates) is taken by the Contractor to remedy Ineldent(s) in the provision of similar PMNS in other jurisdictions, such corrective action shall be provided to the County at no additional cost if such corrective action is needed for the Contractor to meet its obligations under this Contract. Notice Regarding Other,tui-1s ictions Contractor shall promptly notify the County Project Manager upon discovery or reasonable belief of the following: (a)Incidcnt(s) known or reasonably known to have occurred in the provision of similar PMNS in another,jurisdiction; (b) any claim or action against, or any loss by, Contractor that involves or may reasonably be expected to involve similar PMNS; (c) the initiation of any government investigation that may result in a finding that Contractor is not in compliance with all applicable federal,state and local laws. Responding to Legal Reauests Contractor shall promptly notify the County upon receipt of any legal requests, including but not limited to subpoenas,court or administrative agency orders,service of process,or requests by any person or entity(other than Contractor's employees),which in any way might reasonably require access to the County's confidential Data, Contractor shall notify the County by the fastest means available and also in writing,unless prohibited by law from providing such notification.Contractor shall provide such notification within forty-eight(48)hours after Contractor receives the request. Thereaftei-, Contractor shall comply with such legal requests only to the extent required by applicable law. In responding to legal requests,Contractor shall take measures to protect Personal Data or Non-Public Data,the disclosure of which would violate Contract terms,court orders,and/or applicable state or federal law, Such protective measures may include, but are not limited to, seeking protective orders or filing the Data under seat.Contractor shall not respond to legal requests directed to the County unless authorized in writing to do so by the County, ComfygJ'Orange h4rt-064 25f110178 MkMo.2424402 SherIff-Coronei/Purchasing Services Bureau Public Mass Modification System Page 31 of 57