Orange County NC Website
DocuSign Envelope ID:46BCB3EE-5A8D-41 CE-B703-D32F5BCA1053 <br /> Continuous Monitoring Process and originates from N.C.G.S 143B-1376, located online at <br /> g <br /> http://www.ncleg.netlEnactedLegislation/Statutes/HTML/ByChapter/Chapter 143B.htm1,which requires <br /> the State CIO to annually assess each agency and each agency's vendors' compliance with enterprise <br /> security standards. The Contractor will assist the Division with risk assessment and security assessment <br /> of their critical systems and infrastructure. Assessments are to be performed either through third-party or <br /> self-assessment on a three-year cycle(with a third-party assessment mandated every third year.) All <br /> findings identified in the assessment must be provided to DIT within 30 days of assessment completion <br /> and a plan to remediate each finding. <br /> OVERSIGHT <br /> Access to Persons and Records: The State Auditor shall have access to persons and records as a result of <br /> all contracts or grants entered into by State agencies or political subdivisions in accordance with General <br /> Statute 147-64.7. Additionally, as the State funding authority, the Department of Health and Human i! <br /> Services shall have access to persons and records as a result of all contracts or grants entered into by State <br /> agencies or political subdivision. <br /> Record Retention: Records shall not be destroyed, purged or disposed of without the express written <br /> consent of the Division. State basic records retention policy requires all grant records to be retained for a <br /> minimum of five years or until all audit exceptions have been resolved, whichever is longer. If the <br /> contract is subject to federal policy and regulations,record retention may be longer than five years. <br /> Records must be retained for a period of three years following submission of the final Federal Financial <br /> Status Report, if applicable,or three years following the submission of a revised final Federal Financial <br /> Status Report. Also, if any litigation, claim, negotiation, audit, disallowance action, or other action <br /> involving this Contract has been started before expiration of the five-year retention period described <br /> above,the records must be retained until completion of the action and resolution of all issues which arise <br /> from it, or until the end of the regular five-year period described above,whichever is later. The record <br /> retention period for Temporary Assistance for Needy Families(TANF)and MEDICAID and Medical <br /> Assistance grants and programs is a minimum of ten years. <br /> 7441,WA/Qttes feCtentractor] <br /> IN WMAAS 8/11/2017 <br /> RFf1f1RRR77R5Qd E8 <br /> (Signature) (Date) <br /> Matthew Williams VP, Finance and Admin. services <br /> (Printed Name) (Title) <br /> RI, by: <br /> i,, , / W,,, � .L&GU <br /> Cfl535n4 & <br /> 8/11/2017 <br /> (Signature) (Date) <br /> Andrew w. Kleitsch controller <br /> (Printed Name) (Title) <br /> • <br /> • <br />