{ "docId": "019f6b8f-396d-7449-84da-64056786eb24", "docSlug": "jarvis-mckinsey-solicitation-state-of-new-jersey", "documentTitle": "mckinsey solicitation state of new jersey", "authorId": "mckinsey-solicitation-state-of-new-jersey", "authorName": null, "documentKindSlug": "consulting-deck", "documentKindLabel": "Consulting deck", "sourceTypeSlug": "strategy_consulting", "sourceTypeLabel": "Strategy consulting", "presentationDate": null, "orientation": null, "aspectRatio": null, "pageNumber": 35, "pageCount": 50, "prevPage": 34, "nextPage": 36, "slideType": "appendix_disclosure", "function": "other", "density": "overcrowded", "nDataPoints": 0, "notes": "This page appears to be a continuation of a legal or procurement document, specifically detailing security obligations for a contractor.", "elementsJson": null, "metadataConfidence": 1, "imagePath": null, "slideHref": "/slides/019f6b8f-396d-7449-84da-64056786eb24/35", "deckHref": "/decks/019f6b8f-396d-7449-84da-64056786eb24", "deckJsonHref": "/decks/019f6b8f-396d-7449-84da-64056786eb24.json", "deckAnchorHref": "/decks/019f6b8f-396d-7449-84da-64056786eb24#slide-35", "components": [ { "bbox": { "h": 0.17, "w": 0.796, "x": 0.102, "y": 0.175 }, "kind": "list", "text": "I. End of Contract Data Handling: Upon termination of this Contract the Contractor shall erase, destroy, and render unreadable all Contractor copies of State data according to the standards enumerated in accordance with the State's Information Disposal and Media Sanitation policy, 09-10-NJOIT (www.nj.gov/it/ps) and certify in writing that these actions have been complete within thirty (30) days of the termination of this Contract or within seven (7) days of the request of an agent of the State whichever shall come first.\nJ. Security Audit: The Contractor must allow State assigned staff full access to all operations for security inspections and audits which may include reviews of all issues addressed in description of the security approach and willingness to enter into good faith discussions to implement any changes.", "attrs": null, "subkind": "bullet", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "764073a3-6c0a-431e-a344-ec67c9dab1be", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.18, "w": 0.796, "x": 0.102, "y": 0.71 }, "kind": "list", "text": "A. Regulations and security requirements - how the Contractor will address security requirements such as PCI, HIPAA, FISMA and etc.\nB. System, Administrative and Personnel Security - the security responsibilities of and supervision required for information owned and/or operated by the Contractor. Security responsibilities include responsibilities for administration of the infrastructure, implementing or maintaining security and the protection of the confidentiality, integrity, and availability of information systems or processes.\nC. Workforce Security - the control process for hiring and terminating of Contractor's employees, and method used for granting and denying access to the Contractor's network, systems and applications. Identify and define audit controls when employment of the employee terminates.", "attrs": null, "subkind": "bullet", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "c5a22576-21d7-496a-b044-9638e30b4f2a", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.015, "w": 0.4, "x": 0.102, "y": 0.68 }, "kind": "paragraph", "text": "In addition, the security plan shall identify and define:", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "2183c12b-c333-404f-b411-4e38cad0232a", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.055, "w": 0.796, "x": 0.102, "y": 0.555 }, "kind": "paragraph", "text": "The security plan shall provide for review of the Contractor's operations and control system. The Contractor shall have the capability to detect and report attempted unauthorized entries into the facility and system. All security requirements for the Contractor apply to development, testing, production and backup systems.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "4917dc53-f50c-40aa-ab1b-5ebd5a3b4381", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.085, "w": 0.796, "x": 0.102, "y": 0.065 }, "kind": "paragraph", "text": "notification. In the event of a breach of any of the Contractor's security obligations or other event requiring notification under applicable law (\"Notification Event\"), the Contractor shall assume responsibility for informing the State Contract Manager and all such individuals in accordance with applicable law and to indemnify, hold harmless and defend the State of New Jersey, its officials, and employees from and against any claims, damages, or other harm related to such Notification Event.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "86332802-bcbc-43e7-81a5-5ac17b7097db", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.11, "w": 0.796, "x": 0.102, "y": 0.405 }, "kind": "paragraph", "text": "If requested, the Contractor must provide a security plan after award of the contract. The document shall describe the administrative, physical, technical and systems controls to be used by the system and/or services. The Contractor's security plan must, at a minimum, provide security measures for the following areas:\nA. Facilities Physical Security;\nB. System Security;\nC. System Data Security; and\nD. Administrative and Personnel Security.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "9916d350-a459-4aeb-9afd-22dfb4ba84de", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.045, "w": 0.796, "x": 0.102, "y": 0.62 }, "kind": "paragraph", "text": "The Contractor shall provide a summary overview of the security document and describe how it has been incorporated into a larger security program for automated data processing. In the plan, the Contractor shall highlight security features of the system.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "f7f951c1-8173-41b0-8f6b-1b0c1f73cf46", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.015, "w": 0.18, "x": 0.102, "y": 0.37 }, "kind": "title", "text": "5.6.3 SECURITY PLAN", "attrs": null, "subkind": "headline", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "34d4451b-9085-4e4e-b873-3efac8656944", "frameworkName": null, "frameworkSlug": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 40, "from": 31, "beatId": "40758be9-b196-471b-8e88-59120d72d37c", "arcName": "The Consultant's Gambit", "arcSlug": "consultants-gambit", "beatName": "Evidence & Proof", "beatSlug": "consultants-gambit-evidence-proof", "evidence": "The document outlines the evaluation criteria and requirements for the proposal", "position": 3, "confidence": 0.8, "parentBeatName": "Evidence", "parentBeatSlug": "evidence" } ], "loops": [], "imagePathAlt": null, "thumbSrc": null, "thumbSrcAlt": null, "locked": true }