Orange County NC Website
Browse       Search
123 <br /> Lessor shall have emergency plans and associated documents readily <br /> available in the event of an emergency. <br /> Janitorial and Any lessor provider maintenance/janitorial staff must undergo a Tier 1 <br /> Maintenance Staff background check. <br /> USDA-FPAC reserves the right to request daytime cleaning in USDA <br /> space. <br /> Facility Security The Lessor shall cooperate and work with the buildings Facility Security <br /> Committee (FSC) Committee (FSC) throughout the term of the lease. <br /> Participation <br /> Electronic Building A. Lessors are prohibited from connecting any portion of their building and <br /> Access Control access control systems (BACS) to any federally-owned or operated IT <br /> Systems (BACS) network. BACS include systems providing fire and life safety control, <br /> Requirements physical access control, building power and energy control, electronic <br /> surveillance, and automated HVAC, elevator, or building monitoring and <br /> control services (including IP addressable devices, application servers, <br /> or network switches). <br /> B. In the event of a cybersecurity incident related to BACS, the Lessor shall <br /> initially assess the cyber incident, identify the impacts and risks to the <br /> Building and its occupants, and follow their organization's cyber and IT <br /> procedures and protocols related to containing and handling a <br /> cybersecurity incident. In addition, the Lessor shall immediately inform <br /> the Lease Contracting Officer's (LCO's) designated representative, i.e., <br /> the Lease Administration Manager(LAM), about cybersecurity incidents <br /> that impact a federal tenant's safety, security, or proper functioning. <br /> C. Lessors are encouraged to put into place the following cyber protection <br /> measures in order to safeguard facilities and occupants: <br /> 1. Engineer and install BACS to comply with the Department of <br /> Homeland Security Industrial Control Systems Computer <br /> Emergency Response Team (DHS ICS-CERT) cyber security <br /> guidance and recommendations (https://ics-cert.us- <br /> cert.gov/Recommended-Practices). <br /> 2. Refer to the National Institute of Standards and Technology <br /> Cyber Security Framework (NIST-CSF) <br /> (https://www.nist.gov/cVberframework) and cybersecurity <br /> guidance in the DHS Commercial Facilities Sector-Specific Plan <br /> (https://www.dhs.gov/publication/nipp-ssp-commercial-facilities- <br /> 2015) for best practices to manage cyber risks. <br /> 3. Encourage vendors of BACS to secure these devices and <br /> software through the following: <br /> a. Develop and Institute a proper Configuration Management <br /> Plan for the BACS devices and applications, so that the <br /> system can be supported. <br /> PAGE 6 LESSOR: GOVERNMENT: FPAC V11.13.2020 <br />