ITPs set forth in , including those relating to the prevention and detection of intrusions, and any other inappropriate use or access of systems and networks. Data Storage. The Licensor shall store all Commonwealth data in the United States. The Licensor shall use industry best practices to update and patch all applicable systems and third-party software security configurations to reduce security risk. The Licensor shall protect their operational systems with applicable anti-virus, host intrusion protection, incident response monitoring and reporting, network firewalls, application firewalls, and employ system and application patch management to protect its network and customer data from unauthorized disclosure. The Licensor shall be solely responsible for applicable data storage required. The Licensor take all commercially viable and applicable measures to protect the data including, but not limited to, the backup of the servers on a daily basis in accordance with industry best practices and encryption techniques. The Licensor agrees to have appropriate controls in place to protect critical or sensitive data and shall employ stringent policies, procedures, to protect that data particularly in instances where such critical or sensitive data may be stored on a Licensor-controlled or a Licensor-owned electronic device. The Licensor shall utilize a secured backup solution to prevent loss of data, back up all data every day and store backup media. Stored backup media must be kept in an all-hazards protective storage safe at the worksite and when taken offsite. All back up data and media shall be encrypted. Adherence to Policy. The Licensor’s support and problem resolution solution shall provide a means to classify problems as to criticality and impact and with appropriate resolution procedures and escalation process for classification of each problem. The Licensor abide by the applicable Commonwealth’s Information Technology Policies (), a list of the most relevant being attached hereto as . The Licensor shall comply with all pertinent federal and state privacy regulations. Closeout. When the purchase or other procurement document’s term expires or terminates, and a new purchase order or other procurement document has not been issued by a
ITPs set forth in , including those relating to the prevention and detection of intrusions, and any other inappropriate use or access of systems and networks. Data Storage. The Licensor shall store all Commonwealth data in the United States. The Licensor shall use industry best practices to update and patch all applicable systems and third-party software security configurations to reduce security risk. The Licensor shall protect their operational systems with applicable anti-virus, host intrusion protection, incident response monitoring and reporting, network firewalls, application firewalls, and employ system and application patch management to protect its network and customer data from unauthorized disclosure. The Licensor shall be solely responsible for applicable data storage required. The Licensor take all commercially viable and applicable measures to protect the data including, but not limited to, the backup of the servers on a daily basis in accordance with industry best practices and encryption techniques. The Licensor agrees to have appropriate controls in place to protect critical or sensitive data and shall employ stringent policies, procedures, to protect that data particularly in instances where such critical or sensitive data may be stored on a Licensor-controlled or a Licensor-owned electronic device. The Licensor shall utilize a secured backup solution to prevent loss of data, back up all data every day and store backup media. Stored backup media must be kept in an all-hazards protective storage safe at the worksite and when taken offsite. All back up data and media shall be encrypted. Adherence to Policy. The Licensor’s support and problem resolution solution shall provide a means to classify problems as to criticality and impact and with appropriate resolution procedures and escalation process for classification of each problem. The Licensor abide by the applicable Commonwealth’s Information Technology Policies (), a list of the most relevant being attached hereto as . The Licensor shall comply with all pertinent federal and state privacy regulations. Closeout. When the purchase or other procurement document’s term expires or terminates, and a new purchase order or other procurement document has not been issued by a
IT_Terms_and_Conditions.docx