Orange County NC Website
Browse       Search
S. Is the Cloud provider obligated to destroy all copies of County data, at the County's request? <br />FASTER: No <br />If No, Explain: FASTER: Upon tommothm o)Me hosting agreement, the Customer may request FASTER <br />will destroy all copies of the Counts Penchi the hosted env /mnmen t. <br />s. What amthe Cloud provider's obligation to Me County in the event of confirmed orsuspected <br />data breaches? <br />FASTER: Win notify exPOMA usl y if a privacy event impacts Customers data. <br />T. Is the Cloud provider obilgated to Inform Me County Mall locations In which the data is Acted <br />Including backups) and to continually keep the Countymformed of any changes to those <br />locations? <br />FASTER: No <br />If No, Explain: FASTER : Servers are Iamtetl In the United SWNf Upon request, FASTER can provide Me <br />ph yskol kmnpn/geogmpbv Of storage of a tenants dam. <br />g. What are the Cloud provider's contractual obligations with respect to litigation hams on county <br />data? <br />FASTER: The hosting provider is Unoble dmainorting litigation hat &. <br />9. What are the Cloud provider's contractual prohibitions on charming data to Individuals, groups <br />or organizations making record requests, unless so directed Iry an authorized County official? <br />FASTER. Me Customer will solely control the disclosure of mendata. The only exception would <br />be court order or In the core of n tom{ State or Protocol laws which would mqulre discourage. <br />10. Does the contract obligate the Cloud provider as allow third -petty audits and/or certifications <br />related to Infrastructure and security, Inducting penetration testing and vulnerability <br />assessment, as requested by the County? <br />FASTER: Na <br />If No. Explain: FASTER. Me hosting provider performs penetration tests against thwounfrinstrincam, <br />and networks. Audits are regakrly rorMucted as prescribed by Industry hestproctkes and <br />guidance. Also, the hosting provider contracts third parties to conduct vulnerabtlRV scons and <br />periodic genetroton tests against the hosted providers nelworbs and infrastructure. <br />11. Does tha con trad obligate the Cloud pmvlder to allow third parry smite Inspections of the <br />�Q <br />Cloud provider's Infrastructure and security practices on a specified basis? <br />FASTER lw <br />Response to 5243 for Orange County, KC I Page 94 <br />