Measures SAP protects its assets and facilities using the appropriate means based on the SAP Security Policy • In general, buildings are secured through access control systems (e.g., smart card access system). • As a minimum requirement, the outermost entrance points of the building must be fitted with a certified key system including modern, active key management. • Depending on the security classification, buildings, individual areas and surrounding premises may be further protected by additional measures. These include specific access profiles, video surveillance, intruder alarm systems and biometric access control systems. • Access rights are granted to authorized persons on an individual basis according to the System and Data Access Control measures (see Section 1.2 and 1.3 below). This also applies to visitor access. Guests and visitors to SAP buildings must register their names at reception and must be accompanied by authorized SAP personnel. • SAP employees and external personnel must wear their ID cards at all SAP locations.
Security Measures Lessee hereby acknowledges that the rental payable to Lessor hereunder does not include the cost of guard service or other security measures, and that Lessor shall have no obligation whatsoever to provide same. Lessee assumes all responsibility for the protection of the Premises, Lessee, its agents and invitees and their property from the acts of third parties.
Mitigation Measures Company shall take commercially reasonable measures (except measures causing it to incur out-of-pocket expenses which BNYM does not agree in advance to reimburse) to mitigate losses or potential losses to BNYM, including taking verification, validation and reconciliation measures that are commercially reasonable or standard practice in the Company’s business.
Performance Measures The System Agency will monitor the Grantee’s performance of the requirements in Attachment A and compliance with the Contract’s terms and conditions.
Performance Measure The specific representation of a process or outcome that is relevant to the assessment of performance; it is quantifiable and can be documented
Access Controls a. Authorized Access - DST shall have controls that are designed to maintain the logical separation such that access to systems hosting Fund Data and/or being used to provide services to Fund will uniquely identify each individual requiring access, grant access only to authorized personnel based on the principle of least privileges, and prevent unauthorized access to Fund Data.
Access Control Supplier will maintain an appropriate access control policy that is designed to restrict access to Accenture Data and Supplier assets to authorized Personnel. Supplier will require that all accounts have complex passwords that contain letters, numbers, and special characters, be changed at least every 90 days, and have a minimum length of 8 characters.
Emergency Generator Although Landlord is the owner of emergency generator and related automatic transfer switches serving the Building and the 901 Building (collectively, the “Emergency Generator”), prior to the date of this First Amendment, Tenant, as the sole tenant of the Building and the 901 Building, has been operating and maintaining the Emergency Generator. Tenant shall, on the date that is 1 day after the mutual execution and delivery of this First Amendment by the parties (“EG Transfer Date”), (x) deliver the Emergency Generator to Landlord in good working order with a full tank of diesel (y) assign to, transfer and deliver to Landlord all governmental permits and licenses (to the extent such permits and licenses are assignable), if any, warranties (to the extent assignable), operating and maintenance manuals, records and other documents concerning the Emergency Generator, and (y) terminate any service, maintenance or other contracts maintained by Tenant with respect to the Emergency Generator. Tenant has not been obligated to maintain a wastewater permit in connection with the Emergency Generator. With respect to any permit required for the Emergency Generator, Landlord acknowledges and agrees that Tenant has been in the process of obtaining a generator permit in connection with a Tenant permitting process underway with the Bay Area Air Quality Management District (“BAAQMD”) for the 901 Building, that Tenant will remove the generator from its permit application with BAAQMD, and that Landlord will need to obtain a generator permit from BAAQMD in its own name. To the best of Tenant’s knowledge, Tenant does not have any other permits in connection with the Emergency Generator. To the extent Tenant has current contracts with any vendors for the Emergency Generator, Tenant and Landlord shall reasonably cooperate to assign or terminate such contracts in the manner set forth in Section 14 above regarding utilities. To the extent it is not possible for Tenant to remove the request for a generator permit from its BAAQMD application or to assign or terminate any service maintenance or other contracts within 1 day after the mutual execution and delivery of this First Amendment, Tenant shall not be in default hereunder if Tenant promptly commences efforts to do so and diligently performs until such actions have been completed within a reasonable period after such date. Landlord shall, within 5 days of the EG Transfer Date, as part of Expenses, conduct such testing of the Emergency Generator required, in Landlord’s sole and absolute discretion, to determine whether the Emergency Generator is, in fact, in good working order. If such testing discloses that the Emergency Generator is not in good working order, Landlord shall have the right, at Tenant’s sole cost and expense, to perform any maintenance and/or repairs required to put the Emergency Generator in good working order. Following the EG Transfer Date, Landlord’s sole obligation for either providing emergency generators or providing emergency back-up power to Tenant shall be: (i) to provide emergency generators with not less than the current capacity of the Emergency Generator and Tenant shall be entitled to Tenant’s share of the capacity thereof available for use by all tenants of the Building and the 901 Building, collectively, in accordance with the rentable area of the Premises and the 901 Building and the collective rentable areas of the Building and the 901 Building occupied by such other tenants, (ii) to contract with a third party to maintain the emergency generators (“Emergency Generator Servicer”) as per the manufacturer’s standard maintenance guidelines, and (iii) to obtain and maintain licenses for the emergency generators as required by applicable law. Landlord shall have no obligation to provide Tenant with operational emergency generators or back-up power or to supervise, oversee or confirm that the Emergency Generator Servicer or any other third party maintaining the emergency generators is maintaining the generators as per the manufacturer’s standard guidelines or otherwise. Landlord shall provide to Tenant copies of any reports received by Landlord from the Emergency Generator Servicer regarding its maintenance and repairs of the emergency generators; provided, however, that in no event shall Landlord’s failure to deliver such reports constitute a default by Landlord under the Lease. During any period of replacement, repair or maintenance of the emergency generators when the emergency generators are not operational, including any delays thereto due to the inability to obtain parts or replacement equipment, Landlord shall have no obligation to provide Tenant with an alternative back-up generator or generators or alternative sources of back-up power. Tenant expressly acknowledges and agrees that Landlord does not guaranty that such emergency generators will be operational at all times or that emergency power will be available to the Premises when needed. Landlord shall provide Tenant with not less than five (5) business days’ notice of the scheduled disruption in the operation of the emergency generators. In the case of an emergency, Landlord shall provide Tenant with notice of any emergency disruption as soon as reasonably possible after Landlord becomes aware of the need for such emergency disruption.
Network Access Control The VISION Web Site and the Distribution Support Services Web Site (the “DST Web Sites”) are protected through multiple levels of network controls. The first defense is a border router which exists at the boundary between the DST Web Sites and the Internet Service Provider. The border router provides basic protections including anti-spoofing controls. Next is a highly available pair of stateful firewalls that allow only HTTPS traffic destined to the DST Web Sites. The third network control is a highly available pair of load balancers that terminate the HTTPS connections and then forward the traffic on to one of several available web servers. In addition, a second highly available pair of stateful firewalls enforce network controls between the web servers and any back-end application servers. No Internet traffic is allowed directly to the back-end application servers. The DST Web Sites equipment is located and administered at DST’s Winchester data center. Changes to the systems residing on this computer are submitted through the DST change control process. All services and functions within the DST Web Sites are deactivated with the exception of services and functions which support the transfer of files. All ports on the DST Web Sites are disabled, except those ports required to transfer files. All “listeners,” other than listeners required for inbound connections from the load balancers, are deactivated. Directory structures are “hidden” from the user. Services which provide directory information are also deactivated.
Safeguards Business Associate, its Agent(s) and Subcontractor(s) shall implement and use appropriate safeguards to prevent the use or disclosure of PHI other than as provided for by this Agreement. With respect to any PHI that is maintained in or transmitted by electronic media, Business Associate or its Subcontractor(s) shall comply with 45 CFR sections 164.308 (administrative safeguards), 164.310 (physical safeguards), 164.312 (technical safeguards) and 164.316 (policies and procedures and documentation requirements). Business Associate or its Agent(s) and Subcontractor(s) shall identify in writing upon request from Covered Entity all of the safeguards that it uses to prevent impermissible uses or disclosures of PHI.