Software Development Life Cycle Policy. The Software Development Life Cycle Policy requires any Contractor developing software for the State to work with DTS in implementing a Software Development Lifecycle (SDLC) that addresses key issues of security, accessibility, mobile device access, and standards compliance. DTS Policy 4000-0004, Change Management Policy: Per the Change Management Policy, any Goods or Custom Deliverables furnished or Services performed by Contractor which have the potential to cause any form of outage or to modify DTS’s or the State of Utah’s infrastructure must be reviewed by the DTS Change Management Committee. Following this notification, any outages or Data Breaches which are a direct result of Contractor’s failure to comply with DTS instructions and policies following notification will result in Contractor’s liability for any and all damages resulting from or associated with the outage or Data Breach.
Software Development Life Cycle Policy. A Contractor developing software for the State shall work with DTS in implementing a Software Development Lifecycle (SDLC) that addresses key issues of security, accessibility, mobile device access, and standards compliance. DTS Policy 4000-0004, Change Management Policy: Goods or Custom Deliverables furnished or Services performed by Contractor which have the potential to cause any form of outage or to modify DTS’s or the State of Utah’s infrastructure must be reviewed by the DTS Change Management Committee. Any outages or Data Breaches which are a result of Contractor’s failure to comply with DTS instructions and policies will result in Contractor’s liability for all damages resulting from or associated with the outage or Data Breach. CONFIDENTIALITY: This section does not apply to records where disclosure is regulated under Federal or State laws. GRAMA applies only to records, therefore if information (other than Non-Public Data, Public Health Information, or State Data) is disclosed orally by either party which either party wishes to remain confidential, then each party shall adhere to the following: Each party will: (a) limit disclosure of any such information to Authorized Persons who have a need to know such information in connection with the current or contemplated business relationship between the parties to which this Contract relates, and only for that purpose; (b) advise its Authorized Persons of the proprietary nature of the information and of the obligations set forth in this Contract and require such Authorized Persons to keep the information confidential; (c) shall keep all information strictly confidential by using a reasonable degree of care, but not less than the degree of care used by it in safeguarding its own confidential information; and (d) not disclose any such information received by it to any third parties, except as otherwise agreed to in writing by the disclosing party. Each party will notify the other of any misuse or misappropriation of such information that comes to said party’s attention. This duty of confidentiality shall be ongoing and survive the Contract Period. Reserved
