AUDIT AND SECURITY Clause Samples
The 'Audit and Security' clause grants one party the right to review and assess the other party's compliance with agreed-upon security standards and procedures. Typically, this involves allowing audits of systems, processes, or records to ensure that sensitive data is being handled appropriately and that security measures are in place and effective. This clause is essential for maintaining trust and accountability, as it helps prevent data breaches and ensures ongoing adherence to security obligations.
AUDIT AND SECURITY.
15.1 The Contractor shall demonstrate the security of any and all systems that may contain consumer data, including the secure transmission and receipt of data and be prepared for an audit of the security measures and confirm the integrity of services; Schedule 6 of the call off Terms and Conditions describes the security requirements in detail and bidders should ensure they have fully considered them.
15.2 The Contractor shall operate the services from secure locations and ensure that all IT, communication and other systems used have the appropriate level of security and the latest IS Security Policy and Standards.
15.3 The Framework Agreement between the Contractor and the Authority shall state the confidentiality and integrity of the information passed between both parties. Subsequent call off contracts pursuant to paragraphs 3.1 and 3.2 above will be subject to each OGD’s security requirements which includes accreditation where required. Contracts with DWP are subject to formal approval by the Authority’s Departmental Security Team and will only be granted when the full technical/security features of the Contractor’s operations and solution are defined and conform to the DWP Security Accreditation procedure and policy. This may involve DWP being granted access to the following: The Contractor’s premises; Contractor documentation; Contractor data; Where the Contractor’s computer and communications system is located and how access to these and the services they provide is controlled.
15.4 In accordance with the DWP Offshoring Policy, the Contractor, or any of its sub-contractors, shall not process, host or access Authority Data from premises outside the United Kingdom without the prior written consent of DWP. Where DWP gives consent, the Contractor shall comply with any reasonable instructions notified to it by DWP in relation to the Authority Data in question. A copy of A Guide for DWP Contractors on the DWP Offshoring Policy is attached an Annex 1.
AUDIT AND SECURITY. 7.1 The Contractor shall demonstrate the security of any and all systems that may contain consumer data, and be prepared for an Audit of the security measures and confirm the integrity of services.
7.2 The Contractor shall operate the Service from secure locations and ensure that all IT and other systems used have the appropriate level of security for example the latest IS Security Policy and standards.
AUDIT AND SECURITY. Licensee will take reasonable action to restrict and control the installation and use of the FSMLabs Software in accordance with the limitations and restrictions set forth in Section 2 of this License, and to permit access only to Developers authorized to install and use the FSMLabs Software. Licensee will make reasonable efforts to ensure compliance by all Developers authorized to use the FSMLabs Software with this License. Licensee grants to FSMLabs the right to have independent auditors selected by FSMLabs and acceptable to Licensee, such acceptance not to be unreasonably withheld, audit the installation and use of the FSMLabs Software by Licensee to ensure compliance with this License at any time during regular business hours with three days prior written notice to Licensee.
AUDIT AND SECURITY. Oleeo provide access to standard “Non-protectively Marked” Oleeo audit and security policy documents free of charge but reserves the right to charge at the applicable rates set out in Schedule 1 for any requests for additional information not contained within such documents and/or additional resources required by the Client from Oleeo to assist with an audit or other security requirements. Oleeo Standdard Terms v27x GC Page 22 of 32 Schedule 8 TESTING SERVICES 1. Description of Services The services to be supplied by the Oleeo to the Client pursuant to the agreement annexed hereto and in accordance with the Service Levels are:
1.1. the Implementation Services and Consultancy Services for the Tests for use by the Client and/or Candidates as more fully set out in paragraph 2 below;
1.2. the specification, support and integration of the System (and therefore the Tests) with the Web Site, as more fully set out in paragraph 3;
1.3. the maintenance, reporting on the use of the System and the application of information gathered as more fully set out in paragraph 3.4.2;
1.4. the training of a Client’s staff in the use of the System as more fully set out in paragraph 4;
1.5. the supply of management information on Candidate error rates as more fully set out in paragraph 6; and
1.6. the production, procurement and/or delivery of the deliverables as more fully set out in paragraph 7.
AUDIT AND SECURITY. 12.1 The Contractor shall demonstrate the security of any and all systems that may contain consumer data, and be prepared for an Audit of the security measures and confirm the integrity of services.
12.2 The Contractor shall operate the Service from secure locations and ensure that all IT and other systems used have the appropriate level of security for example the latest IT Security Standards (copy available on request).
AUDIT AND SECURITY. Oleeo provide access to standard “Non-protectively Marked” Oleeo audit and security policy documents free of charge but reserves the right to charge at the applicable rates set out in Schedule 1 for any requests for additional information not contained within such documents and/or additional resources required by the Client from Oleeo to assist with an audit or other security requirements. Oleeo will maintain accreditation to ISO 27001:2013 or a later equivalent for the duration of the term. Schedule 7 TESTING SERVICES 1. Description of Services The services to be supplied by the Oleeo to the Client pursuant to the agreement annexed hereto and in accordance with the Service Levels are:
1.1. the Implementation Services and Consultancy Services for the Tests for use by the Client and/or Candidates as more fully set out in paragraph 2 below;
1.2. the Statement of Work, support and integration of the System (and therefore the Tests) with the Web Site, as more fully set out in paragraph 3;
1.3. the maintenance, reporting on the use of the System and the application of information gathered as more fully set out in paragraph 3.4.2;
1.4. the training of the Client’s staff in the use of the System as more fully set out in paragraph 6 of Schedule 5;
1.5. the supply of management information on Candidate error rates as more fully set out in paragraph 5; and
1.6. the production, procurement and/or delivery of the deliverables as more fully set out in paragraph 6.