TABLE OF CONTENTS - Department of Public Social Services

More documents

Recommendations

Info

Los Angeles COUNTY Department of Public Social Services LEADER Replacement System (LRS) 6021 6022 6023 6024 6025 6026 6027 6028 6029 6030 6031 6032 6033 6034 6035 6036 6037 6038 6039 6040 6041 6042 6043 6044 6045 6046 6047 6048 6049 6050 6051 and procedures regarding security. Security measures shall be included within the LRS Application Software design and development tools, at integration points of the LRS, and during the LRS implementation. Since the information stored in the LRS processing environment databases is highly sensitive and confidential, security is a critical requirement. The LRS shall be secure and protect against inappropriate access to, or use of, any LRS environment or LRS Data while meeting the business requirements specified in Section 2 (Functional Requirements) of this Attachment B. Only COUNTY-specified Users with proper security, password, and, where appropriate, computing device identification clearance shall be allowed to view, change, or in any way update LRS Data. It is extremely important that LRS Data be accessed only on a “need to know” basis. 1. The LRS shall include both centralized and local administration of LRS security features and requirements that include: a. Access management and control; b. Session management; c. Role/profile management; d. Security monitoring and auditing ; e. Alerts and notifications; and f. Encryption. 2. The LRS shall include a detailed written Information Security Plan, completed by CONTRACTOR, which includes the following: a. Roles and responsibilities of CONTRACTOR; b. Strategies for complying with all applicable federal, State, and local laws, rules, regulations, ordinances, guidelines, directives, policies, and procedures regarding security; c. Baseline security measures, risk assessments (i.e., vulnerability and threat analyses), and continual monitoring of LRS security; d. Incident response activities; e. Security awareness training; LRS RFP - Attachment B (SOR) Page 172 November 30, 2007
Los Angeles COUNTY Department of Public Social Services LEADER Replacement System (LRS) 6052 6053 6054 6055 6056 6057 6058 6059 6060 6061 6062 6063 6064 6065 6066 6067 6068 6069 6070 6071 6072 6073 6074 6075 6076 6077 6078 6079 6080 6081 6082 6083 6084 6085 6086 f. Physical security measures; g. LRS hardware security; h. LRS software security, including application code vulnerability; i. Access policies to all processing environments; j. User security profiles, audit trails, and transaction sampling; k. Physical and logical network management and security, access controls, event management, and reporting; l. LRS Data security administration, file server security, LRS Data structure integrity, virus protection, patch management, backup and recovery, and LRS Data encryption; m. Alternate site logical security including the Project Office and CONTRACTOR network control center; and n. Internet security, including data transmission. 3. The LRS security processes shall support multiple levels of security and shall support Local Office Site security administration as well as centralized security administration. 4. The LRS shall include LRS Data integrity security to ensure the contents of a transaction have not been altered in some way by an unauthorized user. 5. The LRS shall contain appropriate audit and control features, including access control and LRS Data retention. 6. The LRS shall use an industry-accepted protocol for User authentication (e.g., Kerberos 5). 7. The LRS shall include the ability to use biometric logon authentication technology for Users. 8. The LRS shall prevent all but COUNTY-specified Users access to the LRS. 9. The LRS shall include screens and views based on an individual User’s security profile. 10. The LRS shall ensure that no Disabling Device is placed on, or contained in, any LRS Component. 11. The LRS shall display a message and a control requiring a User’s acceptance of the terms and conditions of use of the LRS and LRS Data, prior to allowing any access to the LRS and LRS Data based on security profile. LRS RFP - Attachment B (SOR) Page 173 November 30, 2007
Page 1 and 2:
LEADER REPLACEMENT SYSTEM Request f
Page 3 and 4:
TABLE OF CONTENTS Los Angeles COUNT
Page 5 and 6:
Los Angeles COUNTY Department of Pu
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128: Los Angeles COUNTY Department of Pu
Page 177: Los Angeles COUNTY Department of Pu
Page 229 and 230:
Page 231 and 232:
Page 233 and 234:
Page 235 and 236:
Page 237 and 238:
Page 239 and 240:
Page 241 and 242:
Page 243 and 244:
Page 245 and 246:
Page 247 and 248:
Page 249 and 250:
Page 251 and 252:
Page 253 and 254:
Page 255 and 256:
Page 257 and 258:
Page 259 and 260:
Page 261 and 262:
Page 263:
show all

TABLE OF CONTENTS - Department of Public Social Services

Create successful ePaper yourself

Delete template?

Save as template?