Government Contracts: What’s Needed to Protect the Data?

Here are the questions: What security requirements and contractual structure should be established before a procurement ever goes out the door?

For example, criminal justice (CJIS requirements), health information (HIPAA security requirements), payment card industry (PCI requirements), Internal Revenue Service (IRS requirements) and much more.

In Michigan, this is done in two distinct ways: externally (piggybacking on national or other states' contracts) and internally (allowing local entities to piggyback on Michigan's state contracts).

ESSENTIAL CYBERSECURITY CONTRACT CLAUSES I want to close with a few samples from around the country that can help.

The panelists did say that they collaborate with peers nationwide to constantly improve their contract wording.