ESBD_394762_1739204854647_Att. M - Security Compliance Agreement.pdf

Form 1828b (9/15)

Information Resources Security Compliance

Confidentiality Agreement

(External User)

I understand that the Texas Department of Motor Vehicles (TxDMV) collects and maintains confidential and sensitive information.

I understand that TxDMV permits access to data containing confidential and privileged information by contractual agreement with external users not employed by TxDMV.

I acknowledge my responsibility to protect and maintain the confidentiality of information provided by the department. I understand and agree that I will abide by the standards of confidentiality that must be preserved as I exchange business & technical information based upon my assigned job role and its associated functions. I understand and agree that a breach of confidentiality standards may result in termination of my contract.

I understand and agree that I am responsible for supporting the principles of confidentiality without exception. I am also accountable for the security and well-being of all data and systems entrusted to my care and/or administration. I understand and agree that the unauthorized release of confidential information, or actions deemed negligent resulting in damage or loss of information resources will subject me to disciplinary action including the loss of TxDMV information resource access privileges, civil liability, criminal prosecution, and/ or termination of my contract.

I understand and agree that any and all information that may come to my knowledge while using the department information resources1 may not be used or disclosed except as expressly authorized by department management.

I understand and agree that I may have access to intellectual properties (trademarks, patents, trade secrets, and materials and documents) belonging to TxDMV. I understand and agree that these properties made available to me are confidential and protected by intellectual property laws. These properties are not to be disclosed, copied, or shared with any unauthorized person(s) 2 without the written permission of TxDMV. I understand and agree that I may be required to develop, create, or modify materials protected by intellectual property laws and that this work is solely the intellectual property of TxDMV and may not be disclosed, copied, or shared with unauthorized person(s) without the written permission of TxDMV.

I understand that using TxDMV’s intellectual property for other than their intended purposes is prohibited and may result in termination of contract and prosecution pursuant to Texas Penal

Code §31.05, as well as TxDMV pursuit of any other legal remedies.

I understand and agree that all password(s) I receive or devise for use with department information resources are confidential. I will not disclose to unauthorized persons any

Attachment M password(s) I am given or devise, and I will not post written password(s) where unauthorized persons may view them. I understand and agree that I am responsible for all information resource transactions performed as a result of access authorized by the use of my password(s). I understand and agree that my use of a password not specifically issued to me is expressly prohibited. I agree not to attempt to circumvent information resource security devices or procedures by using or attempting to use any transaction, software, files, or other resource that I am not authorized to use.

I understand and agree that any copyrighted material, including but not limited to commercial computer software and accompanying documentation, made available to me for my use by the department, is protected by copyright laws and is not to be copied for any reason without permission of the department. I understand and agree that the violation of copyright laws, including those applicable to computer software, may result in fines and/or other legal action.

I understand and agree that any department-owned, developed, or licensed software will be returned to the department before the end of my contract. I acknowledge that the source codes, programs, and related documentation constitute valuable intellectual property for the department. I agree that I will not disclose, publish, or disseminate them to any third party who is not bound by a written confidentiality agreement expressly covering the department’s intellectual property and related documentation.

I agree to abide by all department information resource security policies, procedures, and practices. I understand that intentionally failing to honor these requirements or intentionally bypassing them may constitute a breach of security as defined in the Texas Penal Code

§33.02 and may result in immediate loss of information resource privileges. I understand that any attempt to access and utilize department information resources for other than their intended purposes is prohibited and may result in prosecution under the Computer Fraud &

Abuse Act of 1986 as well as any other applicable statutes and regulations.

I have been informed where to obtain a copy of the Texas Penal Code, §33.02:

http://www.statutes.legis.state.tx.us/Docs/PE/htm/PE.33.htm

I understand the expectations of me concerning this agreement and agree to abide by the requirements set forth. I also understand that any questions I may have regarding this agreement or the release and/or disclosure of confidential information should be directed to the

Information Security Office.

Printed Name: Payroll Unit No:

Signature: Date:

http://www.statutes.legis.state.tx.us/Docs/PE/htm/PE.33.htm

Information Resources: any and all computer printouts, online display devices, magnetic storage media, and all computer-related activities involving any device capable of receiving email, browsing Web sites, or otherwise capable of receiving, storing, managing, or transmitting electronic data including, but not limited to, mainframes, servers, personal computers, notebook computers, hand-held computers, personal digital assistant (PDA), pagers, distributed processing systems, network attached and computer controlled medical and laboratory equipment (i.e. embedded technology), telecommunication resources, network environments, telephones, fax machines, printers and service bureaus. Additionally, it is the procedures, equipment, facilities, software, and data that are designed, built, operated, and maintained to create, collect, record, process, store, retrieve, display, and transmit information.

Unauthroized persons refer to those persons who have not been authorized to access TxDMV information resources and who are not bound by a written confidentiality agreement.

Distribution:

(1) Original – to be retained by security administrator for inclusion in user's file.

(2) Copy – to external user