Common use of Access Control to Data Processing Systems Clause in Contracts

Access Control to Data Processing Systems. Bugcrowd implements suitable measures to prevent its data processing systems from being used by unauthorized persons. This is accomplished by: • identification of the terminal and/or the terminal user to the Bugcrowd systems; • automatic time-out of user terminal if left idle, identification and password required to reopen; • automatic turn-off of the user ID when several erroneous passwords are entered, log file of events (monitoring of break-in- attempts); • issuing and safeguarding of identification codes; • dedication of individual terminals and/or terminal users, identification characteristics exclusive to specific functions; • staff policies in respect of each staff access rights to personal data (if any), informing staff about their obligations and the consequences of any violations of such obligations, to ensure that staff will only access personal data and resources required to perform their job duties and training of staff on applicable privacy duties and liabilities; • all access to data content is logged, monitored, and tracked; and • use of state of the art encryption technologies.