ISD Info Security Privacy Req Exhibit FINAL.pdf

This document is an Information Security and Privacy Requirements Exhibit prepared for a California state and local contract opportunity related to a car wash system facility at Eastern Avenue (Contract 15744F). The exhibit establishes comprehensive information security and privacy standards that contractors must implement and maintain throughout the contract term. The requirements cover data protection protocols, system security measures, privacy safeguards, and compliance obligations designed to protect sensitive information associated with the car wash system operations and any related data management systems.

The exhibit details mandatory security controls including access management, encryption standards, audit logging, incident response procedures, and regular security assessments that contractors must incorporate into their operations and service delivery. Contractors are required to comply with applicable California state privacy laws and federal information security regulations, maintain documented security policies, provide staff training on security and privacy practices, and report any security incidents or data breaches within specified timeframes. The requirements also include provisions for third-party vendor management, secure data disposal procedures, and periodic security compliance verification through audits and assessments conducted by the contracting agency.