Orange County NC Website
Browse       Search
inspections, audits or actual disasters? <br />TMA Response: No <br /> <br />If No, Explain: TMA Response: TMA has included our security and operation controls <br />within the Attachments section of our proposal. This information is not included within <br />the scope of the Subscription Agreement for contractual purpose. TMA is open to <br />working with the County to define mutually agreed upon language for contractual <br />purposes. <br /> <br />17. Does the contract require the cloud vendor to notify the County of any outsourced <br />functionality and its provider? <br />TMA Response: No <br /> <br />If No, Explain: TMA Response: TMA is open to disclosing this information and <br />providing language that is mutually agreeable within the scope of the contract. Please <br />note that TMA utilizes Tulsa Connect as our Data Center partner, which is SSAE-16 II <br />certified. <br /> <br />18. What are the contractually required notification period for the County or the cloud vendor <br />for termination of the cloud services? <br />TMA Response: Thirty (30) days prior to the expiration of the initial term or any renewal <br />term. <br /> <br />19. Describe how the County’s data will be stored, managed and archived. <br />TMA Response: Please see the WebTMA Service Provider Security and Operations <br />Controls document within the Attachment section of our response. Please note that <br />additional fees apply to maintaining archived data within the TMA hosted environment. <br />Pricing is based on the size of the archived database. <br /> <br />20. Will the County’s data be stored and managed on a storage system with other data? <br />TMA Response: Yes <br /> <br />If Yes, Explain: TMA Response: The hosted environment is shared. However, for the <br />protection of our clients all client data is stored in separate databases. <br /> <br />21. At what architectural point in the provider’s cloud facility will the County’s data be <br />physically connected to networking equipment with non-County data? <br />TMA Response: All client data is hosted on shared equipment. All traffic behind the <br />firewall is physically connected to the same LAN. Client data is hosted in an independent <br />database. Client data is never co-mingled. <br /> <br />22. What are the cloud provider’s information security policies? <br />TMA Response: TMA has an extensive Security Policy framework that addresses <br />infrastructure security, information security plan, information security password policy, <br />information security incident management, information technology policy, network <br />administrative security policy, data encryption policy, log monitoring, etc. <br />DocuSign Envelope ID: D1041CA6-DBD4-42BE-8B32-7C592BF2BA15DocuSign Envelope ID: 3E613CA5-0A37-4CD3-890F-47CC5E2F38B1