Common use of ACCESS TO SECURITY LOGS AND REPORTS Clause in Contracts

ACCESS TO SECURITY LOGS AND REPORTS. ‌ Upon request, the Contractor shall provide access to security logs and reports to the State or Authorized User in a format as specified in the Authorized User Agreement. CONTRACTOR PERFORMANCE AUDIT‌ The Contractor shall allow the Authorized User to assess Contractor’s performance by providing any materials requested in the Authorized User Agreement (e.g., page load times, response times, uptime, and fail over time). The Authorized User may perform this Contractor performance audit with a third party at its discretion, at the Authorized User’s expense. The Contractor shall perform an independent audit of its Data Centers, at least annually, at Contractor expense. The Contractor will provide a data owner facing audit report upon request by the Authorized User. The Contractor shall identify any confidential, trade secret, or proprietary information in accordance with Appendix B, Section 9(a), Confidential/Trade Secret Materials. PERSONNEL‌ Background Checks‌ The Authorized User Agreement may require the Contractor to conduct background checks on certain Contractor staff at no charge to the Authorized User. Separation of Duties‌ The Authorized User Agreement may require the separation of job duties, and that Contractor staff knowledge of Data be limited to that which is absolutely needed to perform job duties. BUSINESS CONTINUITY/DISASTER RECOVERY (BC/DR) OPERATIONS‌ If required in the Authorized User Agreement, the Contractor shall provide a Business Continuity and Disaster Recovery plan specific to the entire Cloud Solution provided. The Contractor shall specify how the BC/DR plan will impact access to the required features and functionality of the Cloud Product associated with the Authorized User Agreement.

ACCESS TO SECURITY LOGS AND REPORTS. ‌ Upon request, the Contractor shall provide access to security logs and reports to the State or Authorized User in a format as specified in the Authorized User Agreement. CONTRACTOR PERFORMANCE AUDIT‌ The Contractor shall allow the Authorized User to assess Contractor’s performance by providing any materials requested in the Authorized User Agreement (e.g., page load times, response times, uptime, and fail over time). The Authorized User may perform this Contractor performance audit with a third party at its discretion, at the Authorized User’s expense. The Contractor shall perform an independent audit of its their Data Centers, at least annually, at Contractor expense. The Contractor will provide a data owner facing full version of the audit report upon request by the Authorized User. The Contractor shall identify any confidential, trade secret, or proprietary information in accordance with Appendix B, Section 9(a), Confidential/Trade Secret Materials. PERSONNEL‌ Background Checks‌ The Authorized User Agreement may require the Contractor to conduct background checks on certain Contractor staff at no charge to the Authorized User. Separation of Duties‌ The Authorized User Agreement may require the separation of job duties, and that Contractor limit staff knowledge of Data be limited to that which is absolutely needed to perform job duties. BUSINESS CONTINUITY/DISASTER RECOVERY (BC/DR) OPERATIONS‌ If The Contractor shall provide a business continuity and disaster recovery plan if required in the Authorized User Agreement, the Contractor shall provide a Business Continuity and Disaster Recovery plan specific to the entire Cloud Solution provided. The Contractor shall specify how the BC/DR plan will impact access to the required features and functionality of the Cloud Product uptime associated with the Authorized User Agreement.