Technical Security Controls 35 a. Workstation/Laptop encryption. All workstations and laptops that store PHI COUNTY 36 discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of 37 COUNTY either directly or temporarily must be encrypted using a FIPS 140-2 certified algorithm which 1 is 128bit or higher, such as AES. The encryption solution must be full disk unless approved by the 2 COUNTY.
Compliance Monitoring Grantee must be subject to compliance monitoring during the period of performance in which funds are Expended and up to three years following the closeout of all funds. In order to assure that the program can be adequately monitored, the following is required of Grantee:
Security Controls for State Agency Data In accordance with Senate Bill 475, Acts 2021, 87th Leg., R.S., pursuant to Texas Government Code, Section 2054.138, Contractor understands, acknowledges, and agrees that if, pursuant to this Contract, Contractor is or will be authorized to access, transmit, use, or store data for System Agency, Contractor is required to meet the security controls the System Agency determines are proportionate with System Agency’s risk under the Contract based on the sensitivity of System Agency’s data and that Contractor must periodically provide to System Agency evidence that Contractor meets the security controls required under the Contract.
Administrative Controls The Contractor must have the following controls in place:
Presentence Investigation Report/Post-Sentence Supervision 24. Defendant understands that the United States Attorney’s Office in its submission to the Probation Office as part of the Pre-Sentence Report and at sentencing shall fully apprise the District Court and the Probation Office of the nature, scope, and extent of defendant’s conduct regarding the charges against him, and related matters. The government will make known all matters in aggravation and mitigation relevant to sentencing.
ADDITIONAL REPORTING REQUIREMENTS Contractor agrees to submit written quarterly reports to H-GAC detailing all transactions during the previous three (3) month period. Reports must include, but are not limited, to the following information:
Section 508 Compliance All information technology which, pursuant to this Contract, is purchased or upgraded by or for the use of the University (the “Technology”) shall comply with Section 508 of the Rehabilitation Act (29 U.S.C. 794d), as amended. If requested, the Contractor must provide a detailed explanation of how compliance with Section 508 of the Rehabilitation Act is achieved and a validation of concept demonstration. The requirements of this Paragraph along with the Non-Visual Access to Technology clause below shall be construed to achieve full compliance with the Information Technology Access Act, §§ 2.2-3500 through 2.2-3504 of the Code of Virginia.
