COORDINATING, REPORTING, AND RESPONDING TO BREACHES AND SECURITY INCIDENTS. A. Reporting of Breach or Security Incident: If Supplier reasonably suspects or confirms a Breach and/or a Security Incident impacting Institutional Information and/or IT Resources, Supplier must promptly notify UC both orally and in writing using the contacts in the Agreement. Supplier must provide such notifications no later than (1) seventy-two (72) calendar hours after the initial suspicion of a Security Incident and/or Breach and (2) seventy-two (72) calendar hours after the initial confirmation of a Security Incident and/or Breach, if Supplier is able to make such a confirmation. Supplier’s notification must identify:
COORDINATING, REPORTING, AND RESPONDING TO BREACHES AND SECURITY INCIDENTS. A. Reporting of Breach or Security Incident: If Supplier reasonably suspects or confirms a Breach and/or a Security Incident impacting Institutional Information and/or IT Resources, Supplier must promptly notify UC both orally and in writing using the contacts in the Agreement. Supplier must provide such notifications no later than three (3) business days after the initial suspicion of a Security Incident and/or Breach and (2) three (3) business days after the initial confirmation of a Security Incident and/or Breach, if Supplier is able to make such a confirmation. Supplier’s notification must identify:
COORDINATING, REPORTING, AND RESPONDING TO BREACHES AND SECURITY INCIDENTS. A. Reporting of Breach or Security Incident: If Supplier reasonably suspects or confirms a Breach and/or a Security Incident impacting Institutional Information and/or IT Resources, Supplier must promptly notify UC both orally and in writing using the contacts in the Agreement. Supplier must provide such notifications no later than seventy-two (72) calendar hours after the initial suspicion of a Security Incident and/or Breach and will utilize its best efforts to continue to provide updates to UCafter the initial confirmation of a Security Incident and/or Breach, if Supplier is able to make such a confirmation, until such Breach or Security Incident is resolved. Supplier’s notification must identify:
COORDINATING, REPORTING, AND RESPONDING TO BREACHES AND SECURITY INCIDENTS
