CWS/CMS Infected and Unsupported File Extension File Cleanup – UPDATE

CWS Directors, SPOCs and Technical Contacts in Affected Counties:  
 
December 26, 2023 UPDATE:  The California Department of Social Services (CDSS), the CWDS Project and IBM have decided that the safest option is to quarantine the identified infected and unsupported files in CWS/CMS. The files will not be deleted from CWS/CMS, but users will be prevented from opening the affected documents. The affected documents will be saved to a quarantined area of CWS/CMS on Saturday, January 6, 2024. If a CWS/CMS user attempts to open one of the quarantined documents, they will receive the following error message:

Please note that this DRMS 00122 error message is informational only and that the user will be able to continue to work in the CWS/CMS application after receiving the error message.

The CWDS Project and IBM are still looking to receive responses from the CWS Directors indicating their permission to permanently delete these files. Please contact CWDS Customer Relations (CWS_CustRel@otsi.ca.gov) by January 31, 2024, with your decision on whether to have IBM delete the files in a batch file deletion process.
__________________________________________________________________________________________
December 18, 2023 UPDATEIn the attached letter the California Department of Social Services (CDSS) has provided updated guidance to Counties impacted by the CWS/CMS infected and unsupported file cleanup effort.
Please contact CWDS Customer Relations (CWS_CustRel@otsi.ca.gov) with any questions related to this guidance.
_________________________________________________________________________________________
As part of planning for CWS-CARES V1, the CARES Data Conversion team has been performing incremental conversion from CWS/CMS data and documents into CWS-CARES. After the documents are extracted from CWS/CMS, they are scanned to ensure that no viruses are introduced into the CARES environment. During this process, it was discovered that, out of 73 million documents that are stored in the CWS/CMS database, approximately 2,400 documents are infected with a virus or malware. Of these 2,400 documents, 95% were last updated in 2001 or before. 
Further, there are an additional 2,600 files that have an unsupported file extension. 

Due to security concerns, these documents and files cannot be moved into the CWS-CARES application. 
Please NOTE: These infected documents are stored in binary large object (BLOB) format on the mainframe in the Db2 database. As a result, these documents do not affect CWS/CMS data on the mainframe.  However, if the document is opened, the virus can infect the user’s personal computer.   Please ensure that you have a current antivirus operating on your workstation.

If you are receiving this communication, it means that your county is impacted by this issue.  

For each affected County, we will send a report listing the infected files and unsupported file extension files, with additional details pertaining to that County.   The reports will be sent to affected counties after the Kick-off meetings.

Please provide a point of contact including IT Support and Security Officer as appropriate and their information (Name, Email, Role, etc.) for the person that should receive your County’s report no later than 11/8/23. The report will be sent via encrypted email to that person. 

Please use this form to provide the point(s) of contact: CWS/CMS Infected Documents/Unsupported File Extension - Contacts 

Once Customer Relations receives the point of contact person’s information, they will be invited to the Kick-off meetings scheduled for 11/14/23 and 11/16/23. The intent of those meetings will be to review the next steps.  

Action Required
Please provide a point of contact and their information (Name, Email, etc.), using the link above, for the person that should receive your County’s report no later than 11/8/23.