HA Item 3 - Purchase Order to Insight Public Sector, Inc. for MRI / HAPPY Software PHA Pro Housing Authority Management Software (Specification No. 26-016)

Home Browse Search

EXHIBIT 1 I- Insig ht* cuatsc sEero" 1. EXHIBIT A - SUPPLEMENTAL TERMS AND CONDITIONS FOR AWS GOVCLOUD bit if it should not be included in the contract] These Supplemental Terms and Conditions for AWS GovCloud ("AWS GovCloud Supplemental Terms") form an addendum to the Insight AWS Agreement, and set forth the terms and conditions that are specific to the AWS GovCloud Services being purchased by Client from Insight. To the extent these terms conflict with the Insight AWS Agreement, these AWS GovCloud Supplemental Terms will govern with respect your purchase of the AWS GovCloud Services. Terms used but not defined herein will have the meaning given in the AWS Agreement. 1) Use of the AWS GovCloud (U.S.) Region Service Offerings. You may access the AWS GovCloud (U.S.) Region if you have root level access to the relevant program account. 2) AWS GovCloud (U.S.) Region Representations &Warranties. Should you gain access to an AWS GovCloud (U.S.) Region account, the AWS Services may not be used to process or store classified data. You are responsible for verifying that all end users accessing Your Content in the AWS GovCloud (U.S.) Region are eligible to gain access to Your Content. You represent and warrant that You: (i) are a U.S. Person, as defined by 22 CFR part 120.15 ("U.S. Person"); (ii) will only assign a U.S. Person as your account owner for the AWS GovCloud (U.S.) Region; (iii) if required by the International Traffic In Arms Regulations ("ITAR"), have and will maintain a valid Directorate of Defense Trade Controls registration; (iv) are not subject to export restrictions under U.S. export control laws and regulations (e.g., you are not a denied or debarred party or otherwise subject to sanctions); and (v) maintain an effective compliance program to ensure compliance with applicable U.S. export control laws and regulations, including the ITAR. If requested, You agree to provide additional documentation and cooperation to verify the accuracy of the foregoing representations and warranties. 3) Your Use of GovCloud Credentials. a) GovCloud Region. AWS will implement reasonable and appropriate measures for the AWS Network in the GovCloud Region designed to: (i) help You secure Your Content against accidental or unlawful loss, access or disclosure; (ii) implement the in-scope Federal Risk and Authorization Management Program ("FedRAMP") controls for the Services identified as Fed RAMP compliant; and (iii) maintain physical and logical access controls to limit access to the AWS Network by AWS personnel, including employees and contractors, to U.S. citizens, as defined by 8 USC §1401, et seq. ("U.S. Citizens") ((i), (ii) and (iii) collectively the "Security Objectives"). The GovCloud Region is the only AWS Region that has physical and logical access controls that limit access to the AWS Network by AWS Personnel to U.S. Citizens. (The 'AWS Network' means AWS's data center facilities, servers, networking equipment, and host software systems (e.g., virtual firewalls) that are within AWS's control and are used to provide the Services.) b) GovCloud Region Security Standards. i) Information Security Program. AWS will maintain an information security program (including the adoption and enforcement of internal policies and procedures) designed to: (a) satisfy the Security Objectives; (b) identify reasonably foreseeable and internal risks to security and unauthorized access to the AWS Network; and (c) minimize security risks, including through risk assessment and regular testing. AWS will designate one or more Rev. 06/21Q Page 5 of 7