Audit Reports and Security Assessments a. Kronos will have, at a minimum, an annual site audit of Kronos’s information technology general controls including, but not limited to, information security, confidentiality and availability controls, performed by an independent third-party audit firm based on the recognized audit standard SSAE 18 SOC 1 and SOC 2 report or equivalent. Kronos will make available to Customer for review, its SSAE 18 SOC 1 and SOC 2 report or equivalent after the report’s publication by the independent audit firm. Customer agrees to treat such audit reports as Confidential Information under this Agreement. Any control exceptions noted in the SSAE 18 SOC 1 or SOC 2 report or equivalent will be addressed in the report with management’s corrective action. With the exception of Workforce Ready, Kronos maintains certification to ISO 27001 and ISO 27018 and will make the certificate of registration available to Customer upon request.
Audit Reports and Security Assessments a. Ultimate Software will have, at a minimum, an annual site audit of Ultimate Software’s information technology general controls including, but not limited to, information security, confidentiality and availability controls, performed by an independent third- party audit firm based on the recognized audit standard SSAE 18 SOC 1 and SOC 2 report or equivalent. Ultimate Software will make available to Customer for review, its SSAE 18 SOC 1 and SOC 2 report or equivalent after the report’s publication by the independent audit firm. Customer agrees to treat such audit reports as Confidential Information under this Agreement. Any control exceptions noted in the SSAE 18 SOC 1 or SOC 2 report or equivalent will be addressed in the report with management’s corrective action. Ultimate Software maintains certification to ISO 27001 and ISO 27018 and will make the certificate of registration available to Customer upon request, except for Workforce Ready, which has ISO certification on its roadmap.
Audit Reports and Security Assessments a. Team FanClub will have at a minimum, an annual site audit of Team Fanclubs information technology general controls including, but not limited to, information security, confidentiality, and availability controls, performed by an independent third- party audit firm based on recognized audit standards. Team FanClub will make available to you for review, its audit reports after the report’s publication by the independent audit firm. You agree to treat such audit reports as Confidential Information under this Agreement. Any control exceptions noted in the report or equivalent will be addressed in the report with management’s corrective action. Team FanClub maintains all necessary certification and will make the certificate of registration available to you upon request.
