Common use of Contractor Systems Security Clause in Contracts

Contractor Systems Security. 4.10.1 The physical location of the computing and data storage devices (e.g., servers) shall be within controlled access facilities. Individual users may not have access to the data except through their systems that are specifically credentialed for Contractor business. All access will be controlled by appropriate identification, authentication, and authorization methods to validate the approved users. 4.10.2 Standards for secure transmission may be accomplished through such means as certificates, secure socket layer, etc., and storage of the data with encryption, if applicable. 4.10.3 Contractor shall securely destruct data by sanitizing media prior to disposal. 4.10.4 Contractor shall keep security patches, anti-virus, and anti-malware software up to date on all systems on which data may be used.

Contractor Systems Security. 4.10.1 ‌ 4.9.1 The physical location of the computing and data storage devices (e.g., servers) shall be within controlled access facilities. Individual users may not have access to the data except through their systems that are specifically credentialed for Contractor business. All access will be controlled by appropriate identification, authentication, and authorization methods to validate the approved users. 4.10.2 4.9.2 Standards for secure transmission may be accomplished through such means as certificates, secure socket layer, etc., and storage of the data with encryption, if applicable. 4.10.3 4.9.3 Contractor shall securely destruct data by sanitizing media prior to disposal. 4.10.4 4.9.4 Contractor shall keep security patches, anti-virus, and anti-malware software up to date on all systems on which data may be used.