Agenda Packet_2025-07-15 - Laserfiche WebLink

Home Browse Search

Docusign Envelope ID: 72A91 13313-BEA146FE-ACDD-146671 B87804 EXHIBIT 2 change control process that ensures separation of duties and protects the confidentiality, integrity and availability of data. d. Anomalies. When the County or DHCS suspects MEDS usage anomalies, the County will work with Contractor to investigate the anomalies and report conclusions of such investigations and remediation to California Department of Social Services (CDSS). 9. BUSINESS CONTINUITY / DISASTER RECOVERY CONTROLS a. Emergency Mode Operation Plan. The Contractor must establish a documented plan to enable continuation of critical business processes and protection of the security of PH kept in an electronic format in the event of an emergency. Emergency means any circumstance or situation that causes normal computer operations to become unavailable for use in performing the work required under this Agreement for more than twenty-four (24) hours. b. Data Centers. Data centers with servers, data storage devices, and critical network infrastructure involved in the use, storage and/or processing of PII, must include environmental protection such as cooling, power, and fire prevention, detection, and suppression. c. Data Backup and Recovery Plan. i. The Contractor shall have established documented procedures to backup PH to maintain retrievable exact copies of PII. ii. The documented backup procedures shall contain a schedule which includes incremental and full backups. iii. The procedures shall include storing backups offsite. iv. The procedures shall ensure an inventory of backup media. V. The Contractor shall have established documented procedures to recover PH data. vi. The documented recovery procedures shall include an estimate of the amount of time needed to restore the PI I data. vii. It is recommended that the Contractor periodically test the data recovery process. 10. PAPER DOCUMENT CONTROLS E City Council 7 — 125 7/15/2025