09-09-22 - Laserfiche WebLink

Browse Search

DocuSign Envelope ID: 348BB866-CFC7-422D-BFB7-863533B13759 Attachment G GLO Contract No. 22-119-004-D374 Page 1 of 4 GLO Information Security Appendix (CDBG) 1. Definitions "Breach of Security" means any unauthorized access of computerized data that compromises the security, confidentiality, or integrity of GLO Data that is in the possession and/or control of Subrecipient (or any entity with which Subrecipient shares GLO Data as authorized herein) including data that is encrypted if the person accessing the data has the key required to decrypt the data, or a loss of control, compromise, unauthorized disclosure or access, failure to physically secure GLO Data or when unauthorized users access PII or SPI for an unauthorized purposes. The term encompasses both suspected and confirmed incidents involving GLO Data which raise a reasonable risk of harm to the GLO or an individual. A Breach of Security occurs regardless of whether caused by a negligent or intentional act or omission on part of Subrecipient and/or aforementioned entities. "GLO Data" means any data or information, which includes PII and/or SPI as defined below, collected, maintained, and created by the GLO, for the purpose of providing disaster assistance to an individual, that Subrecipient obtains, accesses (via records, systems, or otherwise), receives (from the GLO or on behalf of the GLO), or uses in the performance of the Contract or any documents related thereto. GLO Data does not include other information that is lawfully made available to Subrecipient through other sources. "Personal IdentiNinz Information" or "PII" means information that alone, or in conjunction with other information, identifies an individual as defined at Tex. Bus. & Com Code Section 521.002(a)(1). "Sensitive Personal Information" or "SPI" means the personal information identifying an individual as defined at Tex. Bus. & Com. Code Section 521.002(a)(2). All defined terms found in the Contract shall have the same force and effect, regardless of capitalization. 2. Security and Privacy Compliance 2.1. Subrecipient shall keep all GLO Data received under the Contract and any documents related thereto strictly confidential. 2.2. Subrecipient shall comply with all applicable federal and state privacy and data protection laws, as well as all other applicable regulations. 2.3. Subrecipient shall implement administrative, physical, and technical safeguards to protect GLO Data that are no less rigorous than accepted industry practices including, without limitation, the guidelines in the National Institute of Standards and Technology ("NIST") Cybersecurity Framework Version 1.1. All such safeguards shall comply with applicable data protection and privacy laws. 2.4. Subrecipient will legally bind any contractor(s)/subcontractor(s) to the same requirements stated herein and obligations stipulated in the Contract and documents related thereto. Subrecipient shall ensure that the requirements stated herein are imposed on any contractor/subcontractor of Subrecipient's subcontractor(s).