Exhibit 7 -Information Security & Privacy Requirements.pdf

This is an Information Security & Privacy Requirements exhibit document prepared for the State of California's Rubrik backup appliance renewal procurement (27000521). The exhibit establishes the mandatory security and privacy standards that the contractor must comply with throughout the contract term. The requirements apply to all services, systems, and data handling associated with the backup appliance solution, with particular emphasis on protecting state information assets and maintaining regulatory compliance across California's information technology infrastructure.

The document outlines comprehensive security requirements covering data protection, encryption standards, access controls, audit logging, incident response procedures, and privacy safeguards for sensitive information handled during backup and recovery operations. The contractor must demonstrate compliance with California state information security policies, federal standards, and industry best practices for backup systems security. These requirements are binding conditions of contract performance, and the contractor remains accountable for all subcontractors and third parties involved in service delivery. Failure to meet the specified security and privacy requirements constitutes grounds for contract non-compliance and potential termination.