Attachment_C_DSP_supplier_signed.pdf

This document is a Data Security and Privacy Terms attachment, specifically a Criminal Justice Information Services (CJIS) Security Addendum from the Federal Bureau of Investigation (FBI), involving a private contractor named Andrews Technology HMS Inc. The document outlines security requirements and legal provisions for a contract between a government agency and the private contractor regarding access to and handling of criminal justice information, criminal history records, and other sensitive government data.

The contract focuses on establishing strict security protocols for the contractor when accessing, processing, storing, or transmitting confidential criminal justice information. Key requirements include maintaining a comprehensive security program consistent with federal and state laws, conducting background investigations on personnel with data access, implementing robust information security measures, reporting security incidents, and protecting sensitive data across various environments including cloud, on-premises, and hybrid systems. The document emphasizes the contractor's responsibilities in preventing unauthorized access, ensuring data confidentiality, and complying with specific regulatory standards such as NIST 800-53, HIPAA, and federal tax information guidelines.