Orange County NC Website
Browse       Search
DocuSign Envelope ID: 576DD5DB-E4A9-406B-8F7C-CC4EF3C2484F <br />Cloud Service Questionnaire <br />This questionnaire is to be used to assess security and legal issues <br />surrounding cloud services under consideration for Orange County. For this <br />questionnaire, cloud services are any services requiring storage of County <br />data outside the County network or provision of computing resources outside <br />of the County network. <br />Vendor under consideration: PhotoShelter for Brands <br />Solution under consideration: Photo, video and creative design file storage and sharing <br />Department(s) served: Economic Development/Visitors Bureau <br />1.Who owns the data created by County personnel using this service? <br />a.Chapel Hill/Orange County Visitors Bureau <br />2.Does the Cloud contractually allow the County to access and retrieve its data at the <br />County’s discretion? <br />a.Yes <br />If No, Explain: <br />3.Is the Cloud provider contractually obligated to dispose, return or retrieve data in the <br />event of contract termination? <br />a.Yes <br />If No, Explain: <br />4.Upon such provision of data, is the Cloud provider obligated to specify data format and <br />all information necessary for data extraction? <br />a.Yes. <br />If No, Explain: <br />5.Is the Cloud provider obligated to destroy all copies of County data, at the County’s <br />request? <br />a.Yes <br />If No, Explain: <br />6.What are the Cloud provider’s obligation to the County in the event of confirmed or <br />suspected data breaches? <br />a.In 15+ years, PhotoShelter has never seen a successful DDOS attack or loss of a <br />single bit of data, but in the case that something would happen, PhotoShelter <br />follows the SANS incident response program, and clients notified as soon as a <br />breach would be discovered. <br />DocuSign Envelope ID: A0C7375C-1E9C-4913-9D61-A5E31E833876