Orange County NC Website
Browse       Search
DocuSign Envelope ID: D1041CA6-DBD4-42BE-8B32-7C592BF2BA15 <br /> inspections, audits or actual disasters? <br /> TMA Response: No <br /> If No, Explain: TMA Response: TMA has included our security and operation controls <br /> within the Attachments section of our proposal. This information is not included within <br /> the scope of the Subscription Agreement for contractual purpose. TMA is open to <br /> working with the County to define mutually agreed upon language for contractual <br /> purposes. <br /> 17. Does the contract require the cloud vendor to notify the County of any outsourced <br /> functionality and its provider? <br /> TMA Response: No <br /> If No, Explain: TMA Response: TMA is open to disclosing this information and <br /> providing language that is mutually agreeable within the scope of the contract. Please <br /> note that TMA utilizes Tulsa Connect as our Data Center partner, which is SSAE-16 II <br /> certified. <br /> 18. What are the contractually required notification period for the County or the cloud vendor <br /> for termination of the cloud services? <br /> TMA Response: Thirty(30) days prior to the expiration of the initial term or any renewal <br /> term. <br /> 19. Describe how the County's data will be stored,managed and archived. <br /> TMA Response: Please see the WebTMA Service Provider Security and Operations <br /> Controls document within the Attachment section of our response. Please note that <br /> additional fees apply to maintaining archived data within the TMA hosted environment. <br /> Pricing is based on the size of the archived database. <br /> 20. Will the County's data be stored and managed on a storage system with other data? <br /> TMA Response: Yes <br /> If Yes, Explain: TMA Response: The hosted environment is shared. However, for the <br /> protection of our clients all client data is stored in separate databases. <br /> 21. At what architectural point in the provider's cloud facility will the County's data be <br /> physically connected to networking equipment with non-County data? <br /> TMA Response: All client data is hosted on shared equipment. All traffic behind the <br /> firewall is physically connected to the same LAN. Client data is hosted in an independent <br /> database. Client data is never co-mingled. <br /> 22. What are the cloud provider's information security policies? <br /> TMA Response: TMA has an extensive Security Policy framework that addresses <br /> infrastructure security, information security plan, information security password policy, <br /> information security incident management, information technology policy, network <br /> administrative security policy, data encryption policy, log monitoring, etc. <br />