CJIS Security Policy Section 5.3 Policy Area 3: Incident Response Sample Clauses

CJIS Security Policy Section 5.3 Policy Area 3: Incident Response. In the event of an information security incident affecting the Covered Services, Microsoft will address such incident with Enrolled Affiliate as follows: (a) If Microsoft becomes aware of any unlawful access to any Customer Data stored on Microsoft’s equipment or in Microsoft’s facilities, or unauthorized access to such facilities or equipment resulting in loss, disclosure or alteration of Customer Data (each a “Security Incident”), Microsoft will promptly: (i) notify Enrolled Affiliate of the Security Incident; (ii) investigate the Security Incident and provide Enrolled Affiliate with detailed information about the Security Incident; and (iii) take reasonable steps to mitigate the effects and to minimize any damage resulting from the Security Incident. (b) An unsuccessful Security Incident will not be subject to this Section. An “Unsuccessful Security Incident” is one that results in no unauthorized access to Customer Data or to any Microsoft equipment or facilities storing Customer Data, and may include, without limitation, pings and other broadcast attacks on firewalls or edge servers, port scans, unsuccessful log-on attempts, denial of service attacks, packet sniffing (or other unauthorized access to traffic data that does not result in access beyond IP addresses or headers) or similar incidents.