Laserfiche WebLink
`�� �' � � tlllilt e� <br />`"r3%;��x�. ��""rik=�"�� <br />Company ID Number:32855 Client Company ID Number:385743 <br />software. <br />C. DATA PROTECTION AND PRIVACY REQUIREMENTS <br />1. Web Services E-Verify Employer Agents must practice proper Internet security; this means using HTTP over <br />SSL�fLS (also known as HTTPS) when accessing DHS information resources such as E-Verify [NIST SP 800- <br />95]. Internet security practices like this are necessary because Simple Object Access Protocol (SOAP), which <br />provides a basic messaging framework on which Web Services can be built, allows messages to be viewed <br />or modified by attackers as messages traverse the Internet and is not independently designed with all the <br />necessary security protocols for E-Verify use. <br />2. In accordance with DHS standards, the Web Services E-Verify Employer Agent agrees to maintain physical, <br />electronic, and procedural safeguards to appropriately protect the information shared under this MOU <br />against loss, theft, misuse, unauthorized access, and improper disclosure, copying use, modification or <br />deletion. <br />3. Any data transmission requiring encryption shall comply with the following standards: <br />A. Products using FIPS 197 Advanced Encryption Standard (AES) algorithms with at least 256-bit <br />encryption that has been validated under FIPS 140-2. <br />B. NSA Type 2 or Type 1 encryption. <br />4. User ID Management (Set Standard): All information exchanged between the parties under this MOU will be <br />done only through authorized Web Services E-Verify Employer Agent representatives identified above. <br />5. The Web Services E-Verify Employer Agent agrees to use the E-Verify browser instead of its own interface if <br />it has not yet upgraded its interface to comply with the Federal Acquisition Regulation (FAR) system <br />changes. In addition, Web Services E-Verify Employer Agents whose interfaces do not support the Form I-9 <br />from 2/2/2009 or 8/7/2009 should also use the E-Verify browser until the system upgrade is completed. <br />6. The Web Services E-Verify Employer Agent agrees to use the E-Verify browser instead of its own interface if <br />it has not completed updates to its system within six months from the date DHS notifies the Web Services E- <br />Verify Employer Agent of the system update. The Web Services E-Verify Employer Agent can resume use of <br />its interface once it is up-to-date, unless the Web Services E-Verify Employer Agent has been suspended or <br />terminated from continued use of the system. <br />D. COMMUNICATIONS <br />1. Web Services E-Verify Employer Agents and Software Developers agree to develop an electronic system <br />that is not subject to any agreement that would restrict access to and use of by an agency of the United <br />States. <br />2. The Web Services E-Verify Employer Agent agrees to develop effective controls to ensure the integrity, <br />accuracy and reliability of its electronic system. <br />3. The Web Services E-Verify Employer Agent agrees to develop an inspection and quality assurance program <br />that regularly, at least once per year, evaluates the electronic system, and includes periodic checks of <br />electronically stored information. The Web Services E-Verify Employer Agent agrees to share the results of <br />its regular inspection and quality assurance program with DHS upon request. <br />4. The Web Services E-Verify Employer Agent agrees to develop an electronic system with the ability to <br />produce legible copies of applicable notices, letters, etc. <br />5. All information exchanged between the parties under this MOU will be in accordance with applicable laws, <br />regulations, and policies, including but not limited to, information security guidelines of the sending party <br />with respect to any information that is deemed Personally Identifiable Information (PII), including but not <br />limited to the employee or applicant's Social Security number, alien number, date of birth, or other <br />information that may be used to identify the individual. <br />6. Suspected and confirmed information security breaches must be reported to DHS according to Article <br />II.A.17. Reporting such breaches does not relieve the Web Services E-Verify Employer Agent from further <br />requirements as directed by state and local law. The Web Services E-Verify Employer Agent is subject to <br />applicable state laws regarding data protection and incident reporting in addition to the requirements <br />herein. <br />E. SOFTWARE DEVELOPER RESTRICTIONS <br />1. The Web Services E-Verify Employer Agent agrees that if it develops a Web Services interface and sells such <br />interface, then it can be held liable for any misuse by the company that purchases the interface. It is the <br />responsibility of the Web Services E-Verify Employer Agent to ensure that its interface is used in accordance <br />with E-Verify policies and procedures. <br />Page 11 of 17 I E-Verify MOU for Employers Using a Web Services Employer Agent I Revision Date 06/01/13 <br />