Orange County NC Website
Cloud Service Questionnaire <br />This questionnaire is to be used to assess security and legal issues <br />surrounding cloud services under consideration for Orange County. For this <br />questionnaire, cloud services are any services requiring storage of County <br />data outside the County network or provision of computing resources outside <br />of the County network. <br /> <br />Vendor under consideration: Libris by Photoshelter - Libris.photoshelter.com <br />Solution under consideration: Photo, video and creative design file storage and sharing <br />Department(s) served: Economic Development/Visitors Bureau <br /> <br />1. Who owns the data created by County personnel using this service? <br />a. Chapel Hill/Orange County Visitors Bureau <br /> <br />2. Does the Cloud contractually allow the County to access and retrieve its data at the <br />County’s discretion? <br />a. Yes <br /> <br />If No, Explain: <br /> <br />3. Is the Cloud provider contractually obligated to dispose, return or retrieve data in the <br />event of contract termination? <br />a. Yes <br /> <br />If No, Explain: <br /> <br />4. Upon such provision of data, is the Cloud provider obligated to specify data format and <br />all information necessary for data extraction? <br />a. Yes. <br /> <br />If No, Explain: <br /> <br />5. Is the Cloud provider obligated to destroy all copies of County data, at the County’s <br />request? <br />a. Yes <br /> <br />If No, Explain: <br /> <br />6. What are the Cloud provider’s obligation to the County in the event of confirmed or <br />suspected data breaches? <br />a. In 15+ years, PhotoShelter has never seen a successful DDOS attack or loss of a <br />single bit of data, but in the case that something would happen, PhotoShelter <br />follows the SANS incident response program, and clients notified as soon as a <br />breach would be discovered. <br /> <br />DocuSign Envelope ID: 576DD5DB-E4A9-406B-8F7C-CC4EF3C2484FDocuSign Envelope ID: 79107112-9BB9-477B-B662-FF2F869640FC