EXHIBIT A - INFORMATION SECURITY AND PRIVACY EXHIBIT.pdf

This is an Information Security and Privacy Exhibit supporting a Snowflake Database and Training contract opportunity for the State of California. The exhibit establishes the information security and privacy requirements that the contractor must comply with throughout the contract term. The document outlines mandatory security controls, data protection standards, and privacy obligations applicable to all systems, databases, and services provided under the Snowflake Database and Training engagement, ensuring that any sensitive information handled during the contract performance meets state and federal security benchmarks.

The exhibit specifies security standards including encryption requirements, access controls, audit logging, incident response procedures, and data classification protocols that contractors must implement and maintain. Additionally, the document addresses privacy compliance obligations, confidentiality requirements, personnel security clearances, system monitoring responsibilities, and breach notification procedures. The contractor is required to maintain current security certifications, undergo regular security assessments, and provide documentation demonstrating compliance with all specified security and privacy requirements. These provisions apply to any information systems used to deliver the Snowflake database services and associated training, with particular emphasis on protecting any state or client data that may be accessed or processed during contract performance.