Common use of Additional security requirements Clause in Contracts

Additional security requirements. No Recipient shall download, store or otherwise place confidential information on a portable device or removable media without using password protection and encryption methods that comply with Department approved standards, as defined herein, which standards Department, in its sole discretion, may periodically amend. Such encryption methods must be FIPS-140 compliant and include Advanced Encryption Algorithm (AES) that use a minimum of 128-bit key size.