This page uses extracted PDF text. Text can misread numbers, dates or table columns. Check the PDF before quoting or interpreting it. Redacted areas remain redacted.
RFP Name RFP 20-xxxx-xxxx
further enhance protection in the hosted
environment.
B.10 Does the organization protect data by implementing access ☒ Yes Please provide additional information below:
control mechanisms to limit access to data to personnel whose ☐ No Access to data is protected through role-based
job requires such access? access control, least privilege principles, and
multi-factor authentication. Only authorized
personnel whose job requires access are granted it,
with approvals managed by supervisors. Access is
reviewed regularly, and privileges are adjusted as
needed. Systems are configured to restrict access,
and monitoring tools detect unauthorized
attempts.
B.11 Does the proposed solution uniquely identify and authenticate ☒ Yes Please provide additional information below:
all users (no anonymous access)? ☐ No All users are uniquely identified and authenticated
using unique usernames and complex passwords.
Multi-factor authentication is enforced for both
privileged and non-privileged accounts. Account
sharing is prohibited, and anonymous access is not
permitted. Role-based access controls are
implemented, and access is provisioned only to
authorized users. Shared accounts are limited to
documented business needs and are not used for
general access.
B.12 Does the organization protect data by implementing an ☒ Yes Please provide additional information below:
auditing and systems monitoring program to identify and alert ☐ No Auditing and systems monitoring are in place,
of unauthorized access or transactions? including continuous monitoring, logging, and
real-time analysis of access to sensitive data.
Automated tools generate alerts for unauthorized
access or suspicious activity, and designated
personnel review audit records for anomalies.
Intrusion detection, network monitoring, and
incident response processes are established to
identify and respond to unauthorized access or
transactions.
Page 6 of 19Jump to an indexed page (163 of 163)