Loading...
HomeMy WebLinkAboutContract 33025 May 26 04 03: 11p Steven J. Harvel 512-267-1892 p.2 CITY COtd RgCT NO.SECTARY ,3 3 0as- UMtTEDACCESS AGREEMENT This LIMITED ACCESS AGREEMENT("Agreement")Is made and entered Into by and between the CITY'OF FORT WORTH ("City"), a home rule municipal corporation organized under the laws of-the State of Texas and situated in portions of Tarrant, Denton and Wise Counties,Texas,and Vista SG("Contraebor"). The following statements are true and correct and form the basis of this Agreement. WHEREAS: A. The City owns and operates a Tie server computer system and network(collectively the Network"). B. Contractor wishes to access the City's network C. The Contractor assists the City of Fort Worth with the Municipal Court Case and j, Document Management System Project(the'Project')as provided for In City Secretary Contract No. 29707, the terms and conditions of which are incorporated by reference herein. In order to provide the necessary support, Contractor needs access to Chi's email, Internet and Intranet The City is willing to grant Contractor access to the Network,subject to the terms and conditions set forth in this Agreement,and in the City's standard outside connections policy, ('Extranet Standard') attached as Exhibit"A' and hereby incorporated by reference and made a part of this Agreement for all purposes herein. NOW,THEREFORE,the City and Contractor hereby agree as follows: 1. GRANT OF LIMITED ACCESS. Contractor is hereby granted a limited right of access to the City's Network for the sole purpose of assisting the City of Fort Worth with implementation and integration of the Project The City will provide Contractorwith a password and access number or numbers as necessary. 2. NETWORK RESTRICTIONS. 2.1. Contractor may not share any.passwords or access number or numbers provided by the City except with Contractors officers, agents, servants or employees who work directly with this project. 2.2. Contractor may not access the Network for any purpose other than analyzing Contractor's own Data or Software,or Data maintained by Contractor's Software. 2.9. Contractor acknowledges,agrees and hereby gives its authorization to the City to monitor Contractors use of the City's Network in order to ensure Contractors compliance with this Agreement. 24. A breach by Contractor, its officers, agents, servants or employees, of this Agreement and any other written instructions or guidelines that the City provides to Contract:or•pumuant to this Agreement shall be grounds for the City immediately to deny May 26 04 08z44a Steven J. Harvey 512-267-1892 P.3 Contractor access to the Network and Contractor's Data in addition to any other remedies thatthe Cly may have underthis Agreement or at law or in equity. 25. The City may terminate this Agreement at any time and for any reason. 3. UABILMiAND INDEMNIFICATION. CONTRACTOR SHALL BE LIABLE AND RESPONSIBLE FOR ALL DAMAGES THAT THE CITY MAY IHCUR DIRECTLY ON ACCOUNT OF ANY BREACH OF THIS AGREEMENT BY CONTRACTOR, ITS OFFICERS, AGENT'S, SERVANTS OR EMPLOYEES. THE CITY, ITS OFFICERS, AGENTS, SERVANTS AND EMPLOYEES, SHALL NOT BE LIABLE FOR ANY DAMAGES: THAT CONTRACTOR MAY INCUR AS A RESULT OF THE CITYS RESTRIC71ONS TO OR DENIAL OF ACCESS TO CONTRACTORS DATA ON ACCOUNT OF ANY BREACH OF TM AGI2l=IcWNT BY CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS OR EMPLOYEES, OR FOR ANY REASONABLE SECURITY MEASURES TAKEN SY THE CITY. IN ADDIDON, CONTRACTOR SHALL BE LIABLE AND RESPONSIBLE FOR ANY AND ALL PROPERTY LOSS, PROPERTY DAMAGE AMMOR PERSONAL INJURY, WCLUDWG DEATH, AND ALL CLANS, DEMANDS AND JUDGMENTS THEREFOR, TO THE EXTENT CAUSED BY THE NEGLIGENT'ACT(M OR OMISSION(S) OR INTENTIONAL MISCONDUCT OF CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS ANDIOR EMPLOYEES. CONTRACTOR,AT CONTRACTORS OWN COST OR EXPENSE, HEREBY AGREES TO INDEWIFY, DEFEND AND HOLD HARMLESS THE CITY, ITS ORJVERS, AGENTS, SERVANTS ANDVOR EMPLOYEES FROM AND AGAINST ANY CLAW, LAWSUIT,'DEMAND OR OTHER ACTION TO THE EMNT THAT THE SAME ARISES FROM THE NEGLIGENT ACTIS) OR OMWSIOW OR INTENTIONAL MISCONDUCT OF CONTRACTOR,ITS OFFICERS,AGENTS,SERVANTS OR EMPLOYEES. d. AGREEMENT CUMULATIVE. This Agreement is cumulative of and in addition to any w tten contracts, agreements, understandings or acknowledgments with the City signed by Contractor. To the extent that any term or condition.of this Agreement conflicts with any term or condition of City Secretary Contract No.29707,City Secretary Contract No.29707 shall control. S ENTIRE AGREEMENT. The terms'of this Agreement shall not be waived, altered,modified, supplemented, or amended in any manner except by written instrument signed by an authorized representative of both the City and Contractor. This Agreement and any other documents incorporated herein by reference constitute the entire understanding and Agreement between the City and Contractor as to the matters contained herein regarding Contractor's access to and use of the City's Network. The signature below of an authorized representative acknowledges that the Contractor has read this Agreement and agrees to be bound by terms and conditions set forth herein. [Signature pages follow] z i May 26 04 08:44a Steven J. Harvey 512-267-1892 p.4 1 ESS WHEREOF, the parries hereto have,executed this Agreement on this day of —12 .0 CITY OF FORT WORTH: CONT7RACTOR Mame o ntra r Sy: y: C rC . Z S' slant City Mager Printed Na Title: l ATTEST: ATTEST: By: BY � 1ty tary APPROVED AS TO FOR!lr!ANS{ECA" UTY: y Assistant City ,tc�mey M&C: note reaulmd S I i l� f 3 I 1 • '�"7 4C7 ' ^elf nn i 1 -May 26 04 08:44a Steven J. Harvey 512-267-1892 P.5 EXHIBIT"A" EXTRANET STANDARD Overview The purpose of this standard is to establish the requirements under which third party organizations may connect w the city of FortWorth networks for the purpose of transacting Cry business.The standards listed are spedfc activities required by Section 2.2 of the City of Fort Worth InformationiSecurity Policy_ S_cone Connections between third parties that require access to non-public City of Fort Worth resources fall under this standard,regardless of whether a telecommunication circuit(such as frame relay or ISDN)or Virtual Privacy Network(VPN)technology is used for the connection. Connectivity to third parties such as the Internet Service Providers(ISPs)that provide Internet access for the City of Fort Worth or to the Public Switched Telephone Network do not fall under this standard. Standard , rity Review AN new extranet oonneclivity will go through a security review with the Information Security department(IT Solutions).The reviews are to ensure that all access matches the business requirements in a best possible way,and that the principle of least access is followed. Third Party Connection Agrmtenf Al new connection requests between third parties and the City of Fort Worth require that the third party and the City of Fort Worth representatives agree to and sign a third party agreement. This agreement must be signed by the Director of the sponsoring organization as well as a representative from the third party who is legally empowered to sign on behalf of the third party. The signed document is to be kept on file with IT Solutions.All documents pertaining to connections into the City of Fort Worth labs are to be kept on Ale with IT Solutions. Business Case All production extranet connections must be accompanied by a valid business justification,in writing,that is approved by a project manager in IT Solutions.Lab connections must be approved by IT Solutions.Typically this function is handled as part of a third party agreement The sponsoring organization must designate a person to be the Point of Contact(POC)for the Extranet connection.The POC acts on behalf of the sponsoring organization, and is responsible for those portions of this policy and the third party agreement that partain to It in the event that the POC changes,IT Solutions must be informed promptly. Establishing Connectivity Sponsoring organizations within the City of Fort Worth that wish to establish connectivity to a third party are tb Ale a new site requeetwith IT Solutions to address seatrity issues inherent in the project If the proposed connection is to terminate within a tab at the City of Fort Worth,the sponsoring organization must engage IT Solutions.The sponsoring organization must provide d VJG y, c�C�e' i5�t.f.'jv Play 26 04 08: 44a Steven J. Harvey 512-267-1892 p.6 full and complete Information as to tate nature of the proposed access to the extranet group and IT Solutions,as requested. All connectivity established must be based on the least-access principle,in accordance with the approved business requirements and the security review.In no case will the City of Fort Worth rely upon the third party to protect the City of Fort Worth's network or resources. ModlMna or Chm—whm Connectivity and Amms AAI changes in access must be accompanied by a valid business justification,and are subject to security review.Changes are to be implemented via oorporate change management process. The sponsoring organization is responsible for notifying IT Solutions when there is a material change in their originally provided information so that security and connectivity evolve accordingly. Terminating Access When access is no longer required,the sponsoring organization within the City of FortWorth must notify IT Sokitions,which will then terminate the ace m.This may mean a modification of existing permieskm upto terminating the circuit,as appropriate.IT Solutions must conducten audit of their respective connections on an annual basis to ensure that all exieting connections are still needed,and that the access provided meets the needs of the connection.Connections that are found to be deprecated,andlor are no longer being used to conduct the City of Fort Worth business,will be terminated immediately.Should a security incident or a fending that a circuit has been deprecated and is no longer being used to conduct the City of Fort Worth business necessitate a modification of existing permissions,or termination of connectivity,IT Solutions will notify the POC or the sponsoring organization of the change prior to taking any action. Definitions Circuit For the purposes of this pokey, circuit refers to the metftod of rvrmatted network access,whetfier IYs thr'o'ugh tradi�oiid (SDN,Fame Relay etc.or via VPN encryption technologies. Sponsoring Organization The City of Fort Worth organization that requested that the third party have access to the City of Fort Worth network Third Party A business that Is not a formai or subsidiary part of the City of Fort Worth. 5 i i