Cloud storage Sample Clauses
The cloud storage clause defines the terms under which data is stored, accessed, and managed using remote servers operated by a third-party provider. It typically outlines the responsibilities of both the service provider and the client regarding data security, backup procedures, and access rights, and may specify acceptable use policies or data retention periods. This clause ensures that both parties understand how data will be handled in the cloud environment, thereby reducing the risk of data loss, unauthorized access, or compliance issues.
POPULAR SAMPLE Copied 23 times
Cloud storage. We utilise cloud storage providers in the provision of the Services
Cloud storage. DSHS/County Confidential Information requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DSHS, the County, nor the Contractor have control of the environment in which the Data is stored. For this reason:
9.8.1. DSHS/County Data will not be stored on any consumer grade Cloud solution, unless all of the following conditions are met:
a. Contractor has written procedures in place governing the use of the Cloud storage and the Contractor attests in writing that all such procedures will be uniformly followed
b. The Data will be encrypted while within the Contractor network
c. The Data will remain encrypted during transmission to the Cloud
i. The Data will remain encrypted at all times while residing within the Cloud storage solution.
ii. The Contractor will possess a decryption key for the Data, and the decryption key will be possessed only by the Contractor and/or the County and DSHS.
iii. The Data will not be downloaded to non-authorized systems, meaning systems that are not either the County, DSHS or Contractor networks.
iv. The Data will not be decrypted until downloaded onto a computer within the control of an Authorized User and within either the County, DSHS, or Contractor’s network.
9.8.2. Data will not be stored on an Enterprise Cloud storage solution unless either:
a. The Cloud storage provider is treated as any other Sub-Contractor and agrees in writing to all of the requirements within this exhibit, or
b. The Cloud storage solution used is FedRAMP certified
9.8.3. If the Data includes protected health information (PHI) covered by HIPPA, the Cloud provider must sign a Business Associate Agreement prior to Data being stored in their Cloud solution.
Cloud storage. DSHS Confidential Information requires protections equal to or greater than those specified elsewhere within this Attachment. Cloud storage of Data is problematic as neither DSHS nor the Contractor has control of the environment in which the Data is stored. For this reason:
Cloud storage. Use the cloud provider’s procedures to permanently delete the files and folders.
Cloud storage. DSHS Confidential Information requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DSHS nor the Contractor has control of the environment in which the Data is stored. For this reason:
(1) DSHS Data will not be stored in any consumer grade Cloud solution, unless all of the following conditions are met:
(a) Contractor has written procedures in place governing use of the Cloud storage and Contractor attests in writing that all such procedures will be uniformly followed.
(b) The Data will be Encrypted while within the Contractor network.
(c) The Data will remain Encrypted during transmission to the Cloud.
(d) The Data will remain Encrypted at all times while residing within the Cloud storage solution.
(e) The Contractor will possess a decryption key for the Data, and the decryption key will be possessed only by the Contractor and/or DSHS.
(f) The Data will not be downloaded to non-authorized systems, meaning systems that are not on either the DSHS or Contractor networks.
(g) The Data will not be decrypted until downloaded onto a computer within the control of an Authorized User and within either the DSHS or Contractor’s network.
(2) Data will not be stored on an Enterprise Cloud storage solution unless either:
(a) The Cloud storage provider is treated as any other Sub-Contractor, and agrees in writing to all of the requirements within this exhibit; or,
(b) The Cloud storage solution used is FedRAMP certified.
(3) If the Data includes protected health information covered by the Health Insurance Portability and Accountability Act (HIPAA), the Cloud provider must sign a Business Associate Agreement prior to Data being stored in their Cloud solution.
Cloud storage a. City will meet Cloud and Data requirements in Washington’s Standard for Securing Information Technology Assets, Office of Chief Information Officer (OCIO) Standard 141.10, WaTech’s Information Security Risk Assessment Standard, WaTech’s Encryption Standard, WaTech’s Firewall Standard, WaTech’s Asset Management Policy, WaTech’s Media Sanitization and Disposal Standard, WaTech’s Data Backup and Recovery Standard
b. City will, at a minimum, meet the following requirements:
I. Encrypt the Data at rest and in transit.
II. Control access to the cloud environment with a unique user ID and complex password, passphrase, or stronger authentication method such as a physical token or biometrics.
III. Cloud provider Data center(s) and systems must be Service Organization Control (SOC) 2 Type II certified, and/or a Federal Risk Management Program (FedRAMP) certified solution.
Cloud storage. Data requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DCYF nor the Contractor has control of the environment in which the Data is stored. For this reason:
(1) Data will not be stored in any consumer grade Cloud solution, unless all of the following conditions are met:
(a) Contractor has written procedures in place governing use of the Cloud storage and Contractor attests in writing that all such procedures will be uniformly followed;
(b) The Data will be Encrypted while within the Contractor network; (c). The Data will remain Encrypted during transmission to the Cloud;
Cloud storage. If DSHS Confidential data will be stored in the cloud, the data must be encrypted at rest and transit, and the cloud provider must not possess the key(s) required to decrypt the data. Encryption keys must be held by DSHS or the Contractor. Contractor will be responsible for providing the DSHS Information Security Office with a comprehensive enumeration of the administrative, physical, and technical controls used by the cloud provider to securely store the DSHS data. If the DSHS Confidential data includes HIPAA data, then a Business Associates Agreement must be executed with the cloud provider prior to storage of the data with the cloud provider.
Cloud storage. 9.17.15.1 Subrecipient and its Lower Tier Subrecipient(s) may not utilize cloud storage of County Information Assets without the prior express written authorization of County, after a review of the cloud service by County or its designee(s).
Cloud storage. Data requires protections equal to or greater than those specified elsewhere within this exhibit. Cloud storage of Data is problematic as neither DCYF nor the Contractor has control of the environment in which the Data is stored. For this reason: