Common use of Cloud Solutions Clause in Contracts

Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: • SSAE 18. SSAE 18 SOC 2 Type 2 or SOC 3 compliance certificate • Network Intrusion Detection and Prevention. All systems that are accessible via the internet must actively use a network based intrusion detection and prevention solution.

Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: • SSAE 18. SSAE 18 SOC 2 Type 2 or SOC 3 compliance certificate •  Network Intrusion Detection and Prevention. All systems that are accessible via the internet must actively use a network based intrusion detection and prevention solution.

Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: •  SSAE 18. SSAE 18 SOC 2 Type 2 or SOC 3 compliance certificate •  Network Intrusion Detection and Prevention. All systems that are accessible via the internet must County of Orange, Health Care Agency Software Maint. & Data Hosting Services Page 42 of 50 actively use a network based intrusion detection and prevention solution.

Cloud Solutions. Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: • : 1. SSAE 18. SSAE 18 SOC 2 Type 2 or SOC 3 compliance certificate • certificate 2. Network Intrusion Detection and Prevention. All systems that are accessible via the internet must actively use a network based intrusion detection and prevention solution.