Auditing Compliance. Sales Cookie will conduct audits of the security of the computers, computing environment and physical data centers that it uses in processing Customer Data and Personal Data, as follows: Where a standard or framework provides for audits, an audit of such control standard or framework will be initiated at least annually. Each audit will be performed according to the standards and rules of the regulatory or accreditation body for each applicable control standard or framework. Each audit will be performed by qualified security auditors at Sales Cookie’s selection and expense. Each audit will result in the generation of an audit report (“Sales Cookie Audit Report”), which Sales Cookie will make available upon request. The Sales Cookie Audit Report will be Sales Cookie’s Confidential Information and will clearly disclose any material findings by the auditor. Sales Cookie will promptly remediate issues raised in any Sales Cookie Audit Report to the satisfaction of the auditor. If Customer requests, Sales Cookie will provide Customer with each Sales Cookie Audit Report. The Sales Cookie Audit Report will be subject to non-disclosure and distribution limitations of Sales Cookie and the auditor. To the extent Customer’s audit requirements under the Standard Contractual Clauses or Data Protection Requirements cannot reasonably be satisfied through audit reports, documentation or compliance information Sales Cookie makes generally available to its customers, Sales Cookie will promptly respond to Customer’s additional audit instructions. Before the commencement of an audit, Customer and Sales Cookie will mutually agree upon the scope, timing, duration, control and evidence requirements, and fees for the audit, provided that this requirement to agree will not permit Sales Cookie to unreasonably delay performance of the audit. To the extent needed to perform the audit, Sales Cookie will make the processing systems, facilities and supporting documentation relevant to the processing of Customer Data and Personal Data by Sales Cookie, its Affiliates, and its Sub processors available. Such an audit will be conducted by an independent, accredited third-party audit firm, during regular business hours, with reasonable advance notice to Sales Cookie, and subject to reasonable confidentiality procedures. Neither Customer nor the auditor shall have access to any data from Sales Cookie’s other customers or to Sales Cookie systems or facilities not involved in the Services. Custome...
Auditing Compliance. Altia will conduct audits of the security of the computers, computing environment, physical data centres that it may use in processing Customer Data and Personal Data, as follows: Where a standard or framework provides for audits, Altia will make aspirational efforts to conduct an audit of such control standard or framework annually. Each audit will be performed according to the standards and rules of the regulatory or accreditation body for each applicable control standard or framework. Each audit will be performed by qualified, independent, third party security auditors at Altia’s selection, expense and from time to time, Altia will adopt and observe well-known worldwide programs with government oversight or endorsement. Each audit resulting in the generation of an audit report will be Altia’s Confidential Information, and Altia will clearly disclose any material findings by the auditor to any affected Customer(s) or User(s). Altia will remediate issues raised in any audit report to the satisfaction of the auditor, where possible or adopt mitigating controls. If Customer(s) or User(s) reasonably requests (and only in circumstances where the findings of any audit report are materially detrimental to a Customer(s) use of the Altia Service(s), Altia may provide Customer(s) or User(s) with sufficient information for the Customer(s) or User(s) to assist in remediation of any risk to them.
Auditing Compliance. Staff is aware that H&SS/Behavioral Health will routinely conduct random and targeted audits of access to H&SS/Behavioral Health systems and more specifically, consumer records. Staff shall cooperate with any audit or investigation that may involve staff’s access. Staff agrees that compliance with this Agreement may be subject to review and/or audit.
Auditing Compliance. 7.1 Nottingham City Council will conduct regular audits on all settings on the DoP. A selection of providers will be audited on a termly basis to ensure compliance with the requirements of the delivery of the free entitlements.
7.2 The provider should maintain accurate financial and non-financial records relating to free entitlement places and should give Nottingham City Council access on reasonable notice to these records under this agreement, subject to confidentiality restrictions. This includes administrative and financial records, attendance registers and signed Parent Agreements, which should be retained for a period of 5 years.
7.3 Providers will be required to certify with each funding period’s headcount, that the conditions and requirements of being in receipt of funding are met as stated in this Agreement and the DfE 2018 Statutory Guidance.
7.4 For their financial audit, providers will be contacted in writing to inform of the meeting date and time and which documents will be required at the audit. Included within the auditing process will be checks to ensure that: o Funding is being passed on in the form of a free place o Invoices to parents are clear and transparent o Parents have adequate information about the entitlement o Claims for funding are accurate and supported by a signed Parent Agreement o The register is accurate for the children claimed for. Providers must keep a daily register clearly stating start time and leave times and relevant absent codes of children in receipt of a funded place (see page 32).
7.5 Providers must maintain a specific business bank account for their setting, details of which must be provided to Nottingham City Council with an understanding that Nottingham City Council will only pay funding into this account which must have dual signatory (except where the Provider is a sole trader).
7.6 Providers must attend Business Meetings arranged by Nottingham City Council or ensure attendance by a responsible senior representative from their setting(s) who will cascade information to their colleagues, as appropriate.
7.7 Providers must maintain an active internet connection and e-mail address and use good internet practice, so as to facilitate the exchange of information and guidance. Providers must notify the LA immediately of any changes to their email address and ensure at all times, that data relating to child information is password protected and secure in accordance with Data Protection
7.8 When completing the regis...
Auditing Compliance. USER agrees that USER’s compliance with this AGREEMENT may be subject to review and/or audit by AIMM.
Auditing Compliance. User agrees that User’s compliance with this Agreement may be subject to review and/or audit by SVHC. Audits may be as frequent as daily or as deemed appropriate by SVHC.
Auditing Compliance. We will conduct audits of the security of the computers, computing environment and data centers that we use in processing Customer Data and Personal Data, as follows: • Where a standard or framework provides for audits, an audit of such control standard or framework will be initiated at least annually. • Each audit will be performed according to the standards and rules of the regulatory or accreditation body for each applicable control standard or framework. • Each audit will be performed by qualified, independent, third party security auditors at our selection and expense. Each audit will result in the generation of an audit report (“Audit Report”). The Audit Report will be our Confidential Information and will clearly disclose any material findings by the auditor. We will promptly remediate issues raised in any Audit Report to the satisfaction of the auditor. If You request, We will provide You with each Audit Report. The Audit Report will be subject to non-disclosure and distribution limitations of PowerObjects and the auditor.
