Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below:
Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: • SSAE 18. SSAE 18 SOC 2 Type 2 or SOC 3 compliance certificate • Network Intrusion Detection and Prevention. All systems that are accessible via the internet must actively use a network based intrusion detection and prevention solution.
Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: SSAE 18. SSAE 18 SOC 2 Type 2 or SOC 3 compliance certificate Network Intrusion Detection and Prevention. All systems that are accessible via the internet must County of Orange, Health Care Agency Software Maint. & Data Hosting Services Page 42 of 50 MA-042-21010508 File Folder: C028362 actively use a network based intrusion detection and prevention solution.
Cloud Solutions. Subject to Customer’s continued and full compliance with all of the terms and conditions of this Agreement, including without limitation, Customer’s payment of all of the fees due hereunder, Palantir will provide Customer with access to the Cloud Solution pursuant to the applicable Order during the applicable Term associated with such Cloud Solution solely for its internal business purposes, and only (i) for use in accordance with the Documentation and (ii) for the purposes specified in the applicable Order.
Cloud Solutions. The products and price list is located on the Contractor’s dedicated State website, hosted and maintained by the Contractor, and is incorporated into this Participating Addendum by reference. It can also be located at xxxxx://xxx.xxx.xxx/, Attachment C of Master Agreement is incorporated into this exhibit as a reference. Changes in product and pricing must be approved by the lead state and shall be effective when published on the dedicated state website. Dedicated website;
Cloud Solutions. All servers and data associated with the Arkansas instance of the Contractor provided Cloud Products and Services must reside in the continental United States. Contractor shall perform all work on the Cloud Products and Services from within the continental United States of America provided, however, that the State consents to the global delivery of technical assistance and support via Arkansas Department of Transformation and Shared Services Division of Information Systems monitored and controlled access. Except as specified in this section, Cloud Products and Services must not be accessed from outside of the U.S
Cloud Solutions. The term “Cloud Solutions” shall refer to the products and services offered under the Master Agreement.
Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: • Network Intrusion Detection and Prevention. All systems that are accessible via the internet must actively use a network based intrusion detection and prevention solution. • Workstation/Laptop Encryption. All workstations, laptops and mobile devices that process and/or store OCHCA data must be encrypted using full disk encryption that uses a FIPS 140-2 certified algorithm, such as AES, with a 128bit key or higher. • Patch Management. All workstations, laptops, and other systems that access, process and/or store OCHCA data must have appropriate security patches installed. Application Service Providers must utilize a documented patch management process which determines installation timeframe based on risk assessment and vendor recommendations. At a minimum, all applicable patches must be installed within 30 days of vendor release. • Application Access. All systems accessible via the internet must employ security controls to prevent access to the application via an asset not approved or owned by the county. • Risk Assessment. Application Service Providers hosting data for HIPAA covered services must conduct an accurate and thorough Risk Assessment as required by HIPAA Security Rule, Security Management (§ 164.308(a)(1)). Further, they must follow the risk assessment methodology, based on the latest version of National Institute of Standards and Technology (NIST) SP 800-30 (xxxx://xxxx.xxxx.xxx/publications/nistpubs/800-30-rev1/sp800_30_r1.pdf). Upon request, the Risk Assessment findings and remediation strategy must be shared with XXXXX. • NIST. To ensure compliance with HIPAA, Application Service Providers shall implement appropriate security safeguards by following NIST guidelines.
Cloud Solutions
