Compliance Verification. Upon the Province’s request, the Contractor must provide, at no additional cost, the following security reports to the Province at least every six months during the Term: vulnerability scan reports of those Systems providing the Services; and patch status reports for those Systems providing the Services. In addition to any other rights of inspection the Province may have under this Agreement or under statute, the Province has the rights, at any reasonable time and on reasonable notice to the Contractor, to: request the Contractor to verify compliance with this Schedule and to keep security controls documentation or records to support compliance; and enter on the Contractor premises and Facilities to inspect and to validate the Contractor’s compliance with the security obligations under this Agreement The Contractor must permit, and provide reasonable assistance to, the exercise by the Province of the Province’s rights under this section. If any non-compliance or deficiency is found, the Province may (in addition to any other rights it may have) require the Contractor, at the Contractor’s expense, to develop and implement a corrective action plan within a reasonable time.
Appears in 16 contracts
Samples: Corporate Supply Arrangement, Corporate Supply Arrangement, General Service Agreement