Application Development; Vulnerability Scans and Penetration Tests Sample Clauses

Application Development; Vulnerability Scans and Penetration Tests. Seller shall: (i) implement a secure development methodology that incorporates security throughout the development lifecycle; (ii) develop and enforce secure coding standards; (iii) Ensure developers do not have unmonitored access to the production environment.
Sample 1Sample 2Sample 3
AutoNDA by SimpleDocs
Application Development; Vulnerability Scans and Penetration Tests. Supplier shall: (i) implement a secure development methodology that incorporates security throughout the development lifecycle; (ii) develop and enforce secure coding standards; (iii) perform secure code reviews using automated scanning tools for all externally-facing applications and for any software developed by Supplier (or a Contractor) and delivered to CUSTOMER; (iv) perform vulnerability scans at least once each quarter for all externally-facing applications that receive, access, process or store CUSTOMER Confidential Information and CUSTOMER’s client’s Confidential Information; upon request by CUSTOMER, Supplier shall confirm in writing that Supplier has successfully performed such vulnerability scans; (v) perform penetration tests at least once each year for all externally-facing applications that receive, access, process or store CUSTOMER Sensitive Information; such penetration tests shall be conducted by Supplier’s testing vendor who has been approved by CUSTOMER; upon request by CUSTOMER, Supplier shall confirm in writing that Supplier has successfully performed such penetration tests; and Supplier shall correct all material issues discovered in the course of such penetration tests conducted by or on behalf of Supplier within thirty (30) days or, if such issue(s) cannot be corrected within such thirty (30) day period, within a period of time mutually agreed to by Supplier and CUSTOMER; and
Sample 1
Application Development; Vulnerability Scans and Penetration Tests. Envestnet shall:
Sample 1
Application Development; Vulnerability Scans and Penetration Tests. Vendor shall: 4.9.1. Implement a secure development methodology that incorporates security throughout the development lifecycle; 4.9.2. Develop and enforce secure coding standards; 4.9.3. Perform secure code reviews using automated scanning tools for all externally-facing applications and for any software developed by Vendor (or a Contractor) and delivered to Altruist; 4.9.4. Perform vulnerability scans at least once each quarter for all externally-facing applications that receive, access, process or store Altruist Proprietary Information or Client Data; upon request by Altruist, Vendor shall confirm in writing that Vendor has successfully performed such vulnerability scans; Altruist shall have the right to perform vulnerability scans of these applications at least once each quarter at Altruist’s expense; and Vendor shall correct all material issues discovered in the course of the vulnerability scans conducted by or on behalf of Vendor or Altruist within thirty (30) days or, if such issue(s) can not be corrected within such thirty (30) day period, within a period of time mutually agreed to by Vendor and Xxxxxxxx; and 4.9.5. Perform penetration tests at least once each year for all externally-facing applications that receive, access, process or store Altruist Sensitive Information; such penetration tests shall be conducted by a reputable independent third-party; upon request by Xxxxxxxx, Vendor shall confirm in writing that Vendor has successfully performed such penetration tests; and Vendor shall correct all material issues discovered in the course of such penetration tests conducted by or on behalf of Vendor within thirty (30) days or, if such issue(s) can not be corrected within such thirty (30) day period, within a period of time mutually agreed to by Vendor and Altruist.
Sample 1

Related to Application Development; Vulnerability Scans and Penetration Tests

  • DEVELOPMENT OR ASSISTANCE IN DEVELOPMENT OF SPECIFICATIONS REQUIREMENTS/ STATEMENTS OF WORK

  • Laboratory Testing All laboratories selected by UPS Freight for analyzing Controlled Substances Testing will be HHS certified.

  • Substance Abuse Testing The Parties agree that it is in the best interest of all concerned to promote a safe working environment. The Union has no objection to pre-employment substance abuse testing when required by the Employer and further, the Union has no objection to voluntary substance abuse testing to qualify for employment on projects when required by a project owner. The cost and scheduling of such testing shall be paid for and arranged by the Employer. The Union agrees to reimburse the Employer for any failed pre-access Alcohol and Drug test costs.

  • Selection of Subcontractors, Procurement of Materials and Leasing of Equipment The contractor shall not discriminate on the grounds of race, color, religion, sex, national origin, age or disability in the selection and retention of subcontractors, including procurement of materials and leases of equipment. The contractor shall take all necessary and reasonable steps to ensure nondiscrimination in the administration of this contract. a. The contractor shall notify all potential subcontractors and suppliers and lessors of their EEO obligations under this contract. b. The contractor will use good faith efforts to ensure subcontractor compliance with their EEO obligations.

  • Design Development Phase INDICATE IN STATEMENT OF WORK “NOT APPLICABLE” IF SECTION IS NOT APPLICABLE 1.1.6.1. The ARCHITECT/ENGINEER shall prepare from the approved Schematic Design Studies, the Design Development Documents consisting of drawings (including at least architectural, landscaping, civil, structural, mechanical and electrical plans, building sections; and finish schedule), outline specifications following the Construction Specification Institute "CSI" Format and other necessary documents to fix and describe the size and character of the entire Project as to its site, structural, mechanical, and electrical systems, materials and other such essentials as may be appropriate, for and until approved by the State. 1.1.6.2. The ARCHITECT/ENGINEER shall conduct meetings with the State, Efficiency Vermont, and relevant members of the design team, to review the Design Development Documents for the purposes of furthering the energy efficiency objectives of the Project. 1.1.6.3. The ARCHITECT/ENGINEER shall prepare for the State a revised accounting of how the Project is responding to LEED criteria. 1.1.6.4. The ARCHITECT/ENGINEER shall submit to the State a revised Statement of Probable Construction Cost based thereon for and until approved by the State.

  • Commercial Operation Date Testing and Modifications Prior to the Commercial Operation Date, the Connecting Transmission Owner shall test the Connecting Transmission Owner’s Attachment Facilities and System Upgrade Facilities and System Deliverability Upgrades and Developer shall test the Large Generating Facility and the Developer Attachment Facilities to ensure their safe and reliable operation. Similar testing may be required after initial operation. Developer and Connecting Transmission Owner shall each make any modifications to its facilities that are found to be necessary as a result of such testing. Developer shall bear the cost of all such testing and modifications. Developer shall generate test energy at the Large Generating Facility only if it has arranged for the injection of such test energy in accordance with NYISO procedures.

  • Information Systems Acquisition Development and Maintenance a. Client Data – Client Data will only be used by State Street for the purposes specified in this Agreement.

  • Loop Testing/Trouble Reporting 2.1.6.1 Telepak Networks will be responsible for testing and isolating troubles on the Loops. Telepak Networks must test and isolate trouble to the BellSouth portion of a designed/non-designed unbundled Loop (e.g., UVL-SL2, UCL-D, UVL-SL1, UCL-ND, etc.) before reporting repair to the UNE Customer Wholesale Interconnection Network Services (CWINS) Center. Upon request from BellSouth at the time of the trouble report, Telepak Networks will be required to provide the results of the Telepak Networks test which indicate a problem on the BellSouth provided Loop. 2.1.6.2 Once Telepak Networks has isolated a trouble to the BellSouth provided Loop, and had issued a trouble report to BellSouth on the Loop, BellSouth will take the actions necessary to repair the Loop if a trouble actually exists. BellSouth will repair these Loops in the same time frames that BellSouth repairs similarly situated Loops to its End Users. 2.1.6.3 If Telepak Networks reports a trouble on a non-designed or designed Loop and no trouble actually exists, BellSouth will charge Telepak Networks for any dispatching and testing (both inside and outside the CO) required by BellSouth in order to confirm the Loop’s working status. 2.1.6.4 In the event BellSouth must dispatch to the end-user’s location more than once due to incorrect or incomplete information provided by Telepak Networks (e.g., incomplete address, incorrect contact name/number, etc.), BellSouth will xxxx Xxxxxxx Networks for each additional dispatch required to repair the circuit due to the incorrect/incomplete information provided. BellSouth will assess the applicable Trouble Determination rates from BellSouth’s FCC or state tariffs.

  • Study Population ‌ Infants who underwent creation of an enterostomy receiving postoperative care and awaiting enterostomy closure: to be assessed for eligibility: n = 201 to be assigned to the study: n = 106 to be analysed: n = 106 Duration of intervention per patient of the intervention group: 6 weeks between enterostomy creation and enterostomy closure Follow-up per patient: 3 months, 6 months and 12 months post enterostomy closure, following enterostomy closure (12-month follow-up only applicable for patients that are recruited early enough to complete this follow-up within the 48 month of overall study duration).

  • Random Testing Notwithstanding any provisions of the Collective Agreement or any special agreements appended thereto, section 4.6 of the Canadian Model will not be applied by agreement. If applied to a worker dispatched by the Union, it will be applied or deemed to be applied unilaterally by the Employer. The Union retains the right to grieve the legality of any imposition of random testing in accordance with the Grievance Procedure set out in this Collective Agreement.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!