Orange County NC Website
Browse       Search
DocuSign Envelope ID:576DD5DB-E4A9-406B-8F7C-CC4EF3C2484F <br /> ®{arise = °,h�� Cloud Service Questionnaire <br /> This questionnaire is to be used to assess security and legal issues <br /> 17 =2 surrounding cloud services under consideration for Orange County. For this <br /> questionnaire, cloud services are any services requiring storage of County <br /> data outside the County network or provision of computing resources outside <br /> rfb car <br /> the County network. <br /> Vendor under consideration: Libris by Photoshelter- Libris.photoshelter.com <br /> Solution under consideration: Photo, video and creative design file storage and sharing <br /> Department(s) served: Economic Development/Visitors Bureau <br /> 1. Who owns the data created by County personnel using this service? <br /> a. Chapel Hill/Orange County Visitors Bureau <br /> 2. Does the Cloud contractually allow the County to access and retrieve its data at the <br /> County's discretion? <br /> a. Yes <br /> If No, Explain: <br /> 3. Is the Cloud provider contractually obligated to dispose, return or retrieve data in the <br /> event of contract termination? <br /> a. Yes <br /> If No, Explain: <br /> 4. Upon such provision of data, is the Cloud provider obligated to specify data format and <br /> all information necessary for data extraction? <br /> a. Yes. <br /> If No, Explain: <br /> 5. Is the Cloud provider obligated to destroy all copies of County data, at the County's <br /> request? <br /> a. Yes <br /> If No, Explain: <br /> 6. What are the Cloud provider's obligation to the County in the event of confirmed or <br /> suspected data breaches? <br /> a. In 15+years, PhotoShelter has never seen a successful DDOS attack or loss of a <br /> single bit of data, but in the case that something would happen, PhotoShelter <br /> follows the SANS incident response program, and clients notified as soon as a <br /> breach would be discovered. <br />