Common use of COORDINATION OF BREACH RESPONSE ACTIVITIES Clause in Contracts

COORDINATION OF BREACH RESPONSE ACTIVITIES. (1) Contractor will fully cooperate with the Department’s investigation of any breach of Confidential Information involving Contractor, including but not limited to making witnesses, documents, HIPAA logs, systems logs, video recordings, or other pertinent or useful information available immediately upon Contractor’s reporting of the breach and throughout the investigation. Contractor’s full cooperation will include but not be limited to Contractor: a. Immediately preserving any potential forensic evidence relating to the breach, and remedying the breach as quickly as circumstances permit; b. Within forty-eight (48) hours designating a contact person to whom the Department will direct inquiries, and who will communicate Contractor responses to Department inquiries; Contractor will designate a Privacy Officer and Security Officer to serve as contacts for the Department; c. As rapidly as circumstances permit, applying appropriate resources to remedy the breach condition, investigate, document, restore the Department service(s) as directed by the Department, and undertake appropriate response activities such as working with the Department, its representative, and law enforcement to identify the breach, identify the perpetrator(s), and take appropriate actions to remediate the security vulnerability; d. Providing status reports to the Department at least every two (2) hours until the root cause of the breach is identified and a plan is devised to fully remediate the breach; e. Once the root cause of the breach is identified and a plan is devised to fully remediate the breach, providing status reports to the Department daily or at mutually agreed upon timeframes, to the Department on breach response activities, findings, analyses, and conclusions; f. Coordinating all media, law enforcement, or other breach notifications with the Department in advance of such notification(s), unless expressly prohibited by law; and g. Ensuring that knowledgeable Contractor staff is available on short notice, if needed, to participate in Department-initiated meetings and/or conference calls regarding the breach.

COORDINATION OF BREACH RESPONSE ACTIVITIES. (1) Contractor will fully cooperate with the Department’s investigation of any breach of Confidential Information involving Contractor, including but not limited to making witnesses, documents, HIPAA logs, systems logs, video recordings, or other pertinent or useful information available immediately upon Contractor’s reporting of the breach and throughout the investigation. Contractor’s full cooperation will include but not be limited to Contractor: a. : Immediately preserving any potential forensic evidence relating to the breach, and remedying the breach as quickly as circumstances permit; b. ; Within forty-eight (48) hours designating a contact person to whom the Department will direct inquiries, and who will communicate Contractor responses to Department inquiries; Contractor will designate a Privacy Officer and Security Officer to serve as contacts for the Department; c. ; As rapidly as circumstances permit, applying appropriate resources to remedy the breach condition, investigate, document, restore the Department service(s) as directed by the Department, and undertake appropriate response activities such as working with the Department, its representative, and law enforcement to identify the breach, identify the perpetrator(s), and take appropriate actions to remediate the security vulnerability; d. ; Providing status reports to the Department at least every two (2) hours until the root cause of the breach is identified and a plan is devised to fully remediate the breach; e. ; Once the root cause of the breach is identified and a plan is devised to fully remediate the breach, providing status reports to the Department daily or at mutually agreed upon timeframes, to the Department on breach response activities, findings, analyses, and conclusions; f. ; Coordinating all media, law enforcement, or other breach notifications with the Department in advance of such notification(s), unless expressly prohibited by law; and g. and Ensuring that knowledgeable Contractor staff is available on short notice, if needed, to participate in Department-initiated meetings and/or conference calls regarding the breach. CLASSIFICATION LABELS: Contractor shall ensure that all data classification labels contained on or included in any item of Confidential Information shall be reproduced by Contractor on any reproduction, modification, or translation of such Confidential Information. Contractor shall make a reasonable effort to add a proprietary notice or indication of confidentiality to any tangible materials within its possession that contain Confidential Information of the Department, as directed by the Department.

COORDINATION OF BREACH RESPONSE ACTIVITIES. (1) Contractor will fully cooperate with the Department’s investigation of any breach of Confidential Information involving Contractor, including but not limited to making witnesses, documents, HIPAA logs, systems logs, video recordings, or other pertinent or useful information available immediately upon Contractor’s reporting of the breach and throughout the investigation. Contractor’s full cooperation will include but not be limited to Contractor: a. Immediately preserving any potential forensic evidence relating to the breach, and remedying the breach as quickly as circumstances permit; b. Within forty-eight (48) hours designating a contact person to whom the Department will direct inquiries, and who will communicate Contractor responses to Department inquiries; Contractor will designate a Privacy Officer and Security Officer to serve as contacts for the Department; c. As rapidly as circumstances permit, applying Applying appropriate resources to remedy the breach condition, investigate, document, restore the Department service(s) as directed by the Department, and undertake appropriate response activities such as working with the Department, its representative, and law enforcement to identify the breach, identify the perpetrator(s), and take appropriate actions to remediate the security vulnerability; d. Providing status daily reports to the Department at least every two outlining planned daily activities by 9:00 a.m. (2CT) hours and including a status overview by 4:00 p.m. (CT) until the root cause of the breach is identified and a plan is devised to fully remediate the breach; e. Once the root cause of the breach is identified and a plan is devised to fully remediate the breach, providing status reports to the Department daily or at mutually agreed upon timeframes, to the Department on breach response activities, findings, analyses, and conclusions; f. Coordinating all media, law enforcement, or other breach notifications with the Department in advance of such notification(s), unless expressly prohibited by law; and g. Ensuring that knowledgeable Contractor staff is available on short notice, if needed, to participate in Department-initiated meetings and/or conference calls regarding the breach.

COORDINATION OF BREACH RESPONSE ACTIVITIES. (1) Contractor will fully cooperate with the Department’s investigation of any breach of Confidential Information involving Contractor, including but not limited to making witnesses, documents, HIPAA logs, systems logs, video recordings, or other pertinent or useful information available immediately upon Contractor’s reporting of the breach and throughout the investigation. Contractor’s full cooperation will include but not be limited to Contractor: a. : Immediately preserving any potential forensic evidence relating to the breach, and remedying the breach as quickly as circumstances permit; b. ; Within forty-eight (48) hours designating a contact person to whom the Department will direct inquiries, and who will communicate Contractor responses to Department inquiries; Contractor will designate a Privacy Officer and Security Officer to serve as contacts for the Department; c. As rapidly as circumstances permit, applying ; Applying appropriate resources to remedy the breach condition, investigate, document, restore the Department service(s) as directed by the Department, and undertake appropriate response activities such as working with the Department, its representative, and law enforcement to identify the breach, identify the perpetrator(s), and take appropriate actions to remediate the security vulnerability; d. ; Providing status daily reports to the Department at least every two outlining planned daily activities by 9:00 a.m. (2CT) hours and including a status overview by 4:00 p.m. (CT) until the root cause of the breach is identified and a plan is devised to fully remediate the breach; e. ; Once the root cause of the breach is identified and a plan is devised to fully remediate the breach, providing status reports to the Department daily or at mutually agreed upon timeframes, to the Department on breach response activities, findings, analyses, and conclusions; f. ; Coordinating all media, law enforcement, or other breach notifications with the Department in advance of such notification(s), unless expressly prohibited by law; and g. and Ensuring that knowledgeable Contractor staff is available on short notice, if needed, to participate in Department-initiated meetings and/or conference calls regarding the breach. CLASSIFICATION LABELS: Contractor shall ensure that all data classification labels contained on or included in any item of Confidential Information shall be reproduced by Contractor on any reproduction, modification, or translation of such Confidential Information. Contractor shall make a reasonable effort to add a proprietary notice or indication of confidentiality to any tangible materials within its possession that contain Confidential Information of the Department, as directed by the Department.

COORDINATION OF BREACH RESPONSE ACTIVITIES. (1) Contractor will fully cooperate with the Department’s investigation of any breach of Confidential Information involving Contractor, including but not limited to making witnesses, documents, HIPAA logs, systems logs, video recordings, or other pertinent or useful information available immediately upon Contractor’s reporting of the breach and throughout the investigation. Contractor’s full cooperation will include but not be limited to Contractor: a. Immediately preserving any potential forensic evidence relating to the breach, and remedying the breach as quickly as circumstances permit; b. Within forty-eight (48) hours designating a contact person to whom the Department will direct inquiries, and who will communicate Contractor responses to Department inquiries; Contractor will designate a Privacy Officer and Security Officer to serve as contacts for the Department; c. As rapidly as circumstances permit, applying appropriate resources to remedy the breach condition, investigate, document, restore the Department service(s) as directed by the Department, and undertake appropriate response activities such as working with the Department, its representative, and law enforcement to identify the breach, identify the perpetrator(s), and take appropriate actions to remediate the security vulnerability;Exhibit A d. Providing status reports to the Department at least every two (2) hours until the root cause of the breach is identified and a plan is devised to fully remediate the breach; e. Once the root cause of the breach is identified and a plan is devised to fully remediate the breach, providing status reports to the Department daily or at mutually agreed upon timeframes, to the Department on breach response activities, findings, analyses, and conclusions; f. Coordinating all media, law enforcement, or other breach notifications with the Department in advance of such notification(s), unless expressly prohibited by law; and g. Ensuring that knowledgeable Contractor staff is available on short notice, if needed, to participate in Department-initiated meetings and/or conference calls regarding the breach.

COORDINATION OF BREACH RESPONSE ACTIVITIES. (1) Contractor will fully cooperate with the Department’s investigation of any breach of Confidential Information involving Contractor, Contractor including but not limited to making witnesses, documents, HIPAA logs, systems logs, video recordings, or other pertinent or useful information available immediately upon Contractor’s reporting of the breach and throughout the investigation. Contractor’s full cooperation will include but not be limited to Contractor: a. Immediately preserving any potential forensic evidence relating to the breach, and remedying the breach as quickly as circumstances permit; b. Within forty-eight (48) hours designating a contact person to whom the Department will direct inquiries, and who will communicate Contractor responses to Department inquiries; Contractor will designate a Privacy Officer and Security Officer to serve as contacts for the Department; c. As rapidly as circumstances permit, applying appropriate resources to remedy the breach condition, investigate, document, restore the Department service(s) as directed by the Department, and undertake appropriate response activities such as working with the Department, its representative, and law enforcement to identify the breach, identify the perpetrator(s), and take appropriate actions to remediate the security vulnerability; d. Providing status reports to the Department at least every two (2) hours mutually agreed upon timeframes until the root cause of the breach is identified and a plan is devised to fully remediate the breach; e. Once the root cause of the breach is identified and a plan is devised to fully remediate the breach, providing status reports to the Department daily or at mutually agreed upon timeframes, to the Department on breach response activities, findings, analyses, and conclusions; f. Coordinating all media, law enforcement, or other breach notifications with the Department in advance of such notification(s), unless expressly prohibited by law; and g. Ensuring that knowledgeable Contractor staff is available on reasonable short notice, if needed, to participate in Department-initiated meetings and/or conference calls regarding the breach.