Vendor_Management_Specs(2685.4).pdf

Vendor Background Check and Security Policy Spec Language

Background Checks for all Vendors:

Notwithstanding the services provided by the vendor, every vendor shall be subject to appropriate security clearance requirements as set out in the Personnel Services Policy Section

No. 2-1 Eligibility Requirements, No. 2-3 Security Clearance for Issuers of Driver’s

License/Identification Cards, and/or KDOR Policy 7003.2 Federal Tax Information Security

Clearance Requirements, attached hereto. Unless otherwise agreed upon, KDOR will conduct backgrounds checks at Vendor’s expense.

Vendor with access to KDOR Information Systems, FTI, and/or MV records:

Vendor must comply with KDOR’s vendor management policy, training policy, and appropriate background check policy, all attached hereto. Vendor agrees that KDOR will monitor compliance with KDOR personnel security requirements.

Vendor must complete the State’s security awareness training and KDOR’s required training for all Temporary employees or the equivalent as well as required annual refresher training, in accordance with KDOR Policy 2201.6 Required Training for KDOR Staff, attached hereto.

KDOR requires documentation that the training requirements for each employee with access to state and federal tax information or motor vehicle information has been completed in accordance with KDOR policies.

Vendor must submit to a KBI Federal Fingerprint Criminal Background Check on all associates permitted to access KDOR systems and information. All background checks shall be at the

Vendor’s expense, unless otherwise agreed-upon, via reimbursement to KDOR. In the event

Vendor fails to reimburse KDOR within 14 days, Vendor authorizes KDOR to deduct the amount of said unpaid background checks from payments due and owing. This background check will be reviewed by KDOR in accordance with KDOR Policies.

Vendor agrees that any system access granted by KDOR shall be used only by the employee to which it was granted. Any unauthorized use may result in revocation of access, removal of employee from KDOR projects, and the right of KDOR to penalize vendor per contract, up to and including termination of contract. Vendor agrees to notify KDOR within three (3) business days of any personnel transfers or terminations of personnel who possess organizational credentials and/or badges, or who have system privileges.

Vendor with access to facilities but not KDOR Information Systems:

Vendor must comply with KDOR’s appropriate background check policies, all attached hereto.

Vendor agrees that KDOR will monitor compliance with KDOR personnel security requirements.

Vendor must submit to a KBI Federal Fingerprint Criminal Background Check on all associates permitted to access KDOR facilities. All background checks shall be at the Vendor’s expense, unless otherwise agreed-upon, via reimbursement to KDOR. In the event Vendor fails to reimburse KDOR within 14 days, Vendor authorizes KDOR to deduct the amount of said unpaid background checks from payments due and owing. This background check will be reviewed by

KDOR in accordance with KDOR Policies. Vendor agrees to notify KDOR within three (3) business days of any personnel transfers or terminations of personnel who possess organizational credentials and/or badges, or who have system privileges. Vendor agrees that any badge or credential issued by KDOR shall be used only by the employee to which it was issued. Any unauthorized badge or credential use may result in revocation of said badge or credential, removal of employee from KDOR facilities, and the right of KDOR to penalize vendor per contract, up to and including termination of contract.