Res 2013-090/Approving a service agreement between Cash Cycle Solutions, Inc. for the Utility Billing and Notice Services

Home Browse Search

1.9.1 Provide a climate controlled warehouse space of sufficient size to receive and store a minimum of two months volume of City envelopes and inserts. 1.9.2 Provide notification to the City at least 60 business days in advance of the depletion of the existing supply of City documents to allow the City to provide necessary revisions prior to the Contractor's reordering of City supplies. 1.10 TASK 10 — SECURITY The Contractor will: 1.10.1 Maintain secure control and handling of all City documents in order to prevent access by unauthorized individuals and ensure that procedures are in place to secure physical and digital safety, security and confidentiality of City documents. In addition, the Contractor warrants that all of its employees are bound by strict confidentiality agreements. 1. 10.2 Safeguard protected health information and privacy information to satisfy HIPPA and PCI compliance requirements and employ comprehensive Data Loss Prevention (DLP) solutions that protect sensitive data in motion, at rest, and in use. This includes files on servers, databases, desktops, laptops, and email including attachments. The Contractor will ensure that all HPI and sensitive member data storage is encrypted with at least 1024 -bit encryption algorithms and that all Web application access and transmissions are protected with 256 -bit HTTPS /SSL encryption. The Contractor's network and servers will be protected with multi -layer firewall infrastructure with real -time intrusion detection, prevention mechanisms, and periodic vulnerability scan. The Contractor will tightly control access to PHI and sensitive member data and such data will be logged at every level. 1.10.3 Utilize digital security cameras to monitor and record activity inside and outside the Contractor's Operations Center. Locate critical servers, workstations and network devices in a secure data center with physical access by the Contractor's authorized personnel controlled by an electronic key system that is a component of the facility security system. The Contractor will ensure that primary components of the information systems located at the Contractor's Data Center are Windows -based servers, storage area network (SAN) devices, firewall and other security systems, network devices, redundant access to the internet, data backup devices, telecommunications devices and infrastructure, redundant power supplies, uninterruptible power and backup generator systems. The Contractor will contain all systems in secure network cabinets accessible only by the Contractor's authorized personnel and authorized staff members of any third -party service provider. In addition, the Contractor will locate network cabinets in a high — security, monitored and environmentally controlled facility, accessible only by authorized personnel. 1.10.4 Place discarded documents in locked containers to be shredded by a service on the Contractor's site. 1.11 TASK 11 —DISASTER RECOVERY 5