General Security Measures. Customer agrees to implement reasonable security measures to assure that only Customer’s authorized employees have the ability to transmit information and instruction to Bank for the purposes of any Service. Bank strongly recommends that Customer adopts an internal, dual control environment in connection with each Service. If Customer chooses not to do so, Xxxxxxxx agrees to adopt a standard greater than ordinary care with respect to Customer accounts, employee supervision, internal controls, and review of statements and other transaction information.
General Security Measures. 3.1. Xxxxxxx employs the following measures to protect the Viewfinder network:
General Security Measures. Each Party shall implement and maintain appropriate technical and organisational security measures to safeguard the confidentiality, detect the presence of security incidents and to protect the Websites and any Confidential Information, Personal Data, Content and SafeTravelPass Material, as well as any material stored, transmitted or otherwise processed in the context of the Agreement from any security incident and/or Personal Data Breach.
General Security Measures. Data Importer will comply with industry-standard security measures (including with respect to personnel, facilities, hardware and software, storage and networks, access controls, monitoring and logging, vulnerability and breach detection, and incident response measures necessary to protect against unauthorized or accidental access, loss, alteration, disclosure or destruction of Data Exporter's Personal Data provided by Data Exporter to Data Importer).
General Security Measures. Use of Provider's Own Systems Use of EDPR's Systems • Identification, dissemination and documentation of functions and obligations of personnel with access to data. • Maintain a written log of all categories of processing activities carried out on behalf of EDPR, pursuant to GDPR requirements. • Maintenance of internal log to ensure that people under their responsibility have committed in writing to uphold the confidential of the personal data processed, they know the rules and procedures to be adopted and are taking part in training in this field. • Design and implementation of user identification and authentication procedure. • Design and implementation of data access control procedure. • Design and implementation of incidence logging procedure. • Design and implementation of a backup copy procedure. • Implementation of procedure of inventory and control of incoming and outgoing media and documents. • Definition of criteria for archiving of media and devices for storage. • Design and implementation of periodic security controls to regularly test, evaluate and assess technical and organisational measures to ensure processing security. • Appointment of security manager(s) or of a Data Protection Officer. • Design and implementation of controls of physical access. • Design and implementation of service continuity plan. • Design and implementation of personal data pseudonymisation procedure where technically feasible. • Identification, dissemination and documentation of functions and obligations of personnel with access to data. • Maintain a written log of all categories of processing activities carried out on behalf of EDPR, pursuant to GDPR requirements. • Maintenance of internal log to ensure that people under their responsibility have committed in writing to uphold the confidential of the personal data processed, they know the rules and procedures to be adopted and are taking part in training in this field. • Design and implementation of incidence logging procedure. • Implementation of procedure of inventory and control of incoming and outgoing media and documents. • Definition of criteria for archiving of media and devices for storage. • Appointment of security manager(s) or of a Data Protection Officer. • Design and implementation of controls of physical access, where appropriate. • Application of EDPR security policies and procedures High 1. General security measures (similar to those applied to managers with medium criticality level)
