Item 15 - Enterprise Land Management System Online Payment Services System

Home Browse Search

APPENDIX E INFORMATION SECURITY REQUIREMENTS 1. Acknowledgment of Information Security Requirements. FORTE acknowledges and agrees to have a "Security Program" that is compliant with all legal and industry mandated information security requirements applicable to its duties and obligations specified under this Agreement. 2. Compliance with Laws and Industry Standards. FORTE agrees to abide by all Laws,Rules and industry- mandated information security standards applicable to its duties and obligations related to information security for Services provided by FORTE to AGENCY under this Agreement. 3. Definitions. a. Consumer Information. "Consumer Information"means collectively PII and Source Data,as defined below. b. Source Data."Source Data"means data provided by AGENCY relating to AGENCY's account activity or other information collected from the AGENCY in order to process a transaction on a AGENCY's behalf or otherwise necessary for a AGENCY's use of Forte's products and services, whether in individual or aggregate form. Source Data may include PH but is not limited to PH. Source Data is and shall remain the property of a AGENCY and/or its Consumer customer. To the extent that AGENCY or FORTE has access to or collects such Source Data, each agrees that it does so solely on behalf of AGENCY and AGENCY's Consumer customers/Constituents pursuant to the obligations hereunder and shall maintain the confidentiality of such Source Data and shall treat it in accordance with applicable Law. 4. Security Obligations. a. FORTE hereby acknowledges that AGENCY has a responsibility under the law to keep PII (as defined in Appendix A)private and confidential,and as a result of any PII received by FORTE in the performance of this Agreement, FORTE shall have the same responsibility. FORTE also acknowledges that with respect to such PII,FORTE shall gain possession of any ownership or other proprietary rights to the PH to which it will have access pursuant to this Agreement(if any).FORTE acknowledges and understands that PII may be subject to applicable local,state and federal Rules and Laws and applicable information industry standards; provided however,to the extent that AGENCY informs FORTE of a local law expanding the definition of PH in Appendix A, FORTE shall only be required to use commercially reasonable efforts to comply with such expanded local requirements. b. Consumer Information that is collected or obtained from AGENCY pursuant to this Agreement shall be stored and maintained by FORTE in a secure environment and transmitted by FORTE in a secure form that meets industry-mandated data security standards. Although FORTE will protect and safeguard PH in a manner that meets industry-mandated data security standards,the Parties agree that there may be some instances in which PH or certain PH data elements are protected in a more secure manner than other data(e.g., encryption). 5. Rights to Use and Access. AGENCY hereby grants to FORTE a non-exclusive right to use all of AGENCY's Source Data including PH provided by AGENCY's Constituents, necessary to perform the Services under this Agreement. FORTE shall limit the use and access to AGENCY's Source Data to uses pursuant to the terms of the Agreement and to FORTE's bona fide employees or independent consultants, contractors or auditors and required governmental agencies,who have a need to know such information 22.11.30 Page 19 CSG165915.0 03-19 26