eSignature / Digital Signature

CDT provides a contract vehicle for customers to subscribe to services with the expectation of added value such as volume discounts, due to enterprise consolidation of all licenses into one contract in addition to:

• Service fulfillment;
• Contract management;
• Service management;
• Vendor management;
• Vendor invoice receipt, review, approval, and payment;
• Procurement process including contract negotiations, purchase order generation, and contract renewals;
• Software subscription tracking and renewal by the customer; and
• Essential administrative activities in support of the above functions.

Security

Compliance with:

• SAM 4983, 5100 & 5300
• NIST Special Publication 800-53 control framework
• California Government Code §16.5 & California Code of Regulations, Digital Signatures, Title 2. Administration, Division 7. Secretary of State, Chapter 10. Digital Signatures §22000 – §22005
• Federal Information Processing Standard (FIPS) 186-4 “Specifications for the DIGITAL SIGNATURE STANDARD (DSS)”
• The California Uniform Electronic Transactions Act, California Civil Code §1633.1 et seq
• Section 508
• Requires “electronic” signature solution methodologies to incorporate, at a minimum, level 2 or higher identity assurance technical requirements for individual signers; as specified in NIST SP 800-63 -2 “Electronic Authentication Guideline.”
• Requires signature (electronic and digital) solutions to have security procedures for the secure storage, retrieval, and retention (based on subscriber retention timeframe requirements) of signed instruments, documents, transactions, or processes. Hashing of signed instruments, documents, transactions, or processes shall comply with the specifications and guidance contained in FIPS 180-4 Secure Hash Standard (SHS), FIPS 140-2 “Security Requirements for Cryptographic Modules;” and, NIST SP 800-107 (Rev.1) “Recommendation for Applications Using Approved Hash Algorithms”
• Digital signatures and all associated data must be saved within the continental US in a NIST-compliant solution.