Corporate Security. A. Provide services of a qualified Security Officer (“SO”) and necessary support staffing to the Bank to support senior management in a matrix reporting role within the GMAC organization. The SO’s responsibilities include but are not limited to the following : • Investigation services for Suspicious Activity Reporting (“SAR’s”) • Coordination with applicable Federal , State and local law enforcement officials as necessary. • Direction Definition, maintaining, monitoring, supporting, and measuring the overall effectiveness of the security program and activities. • Ensure that adequate physical and access control security measures exist to protect the Bank’s associates and assets. • PRICING TERMS:
Corporate Security. 1. J.X. Xxxxxx Corporate Security shall maintain a central repository of copies of J.X. Xxxxxx Service Location security plans.
Corporate Security. 5. To the extent that the Company does not maintain its own separate payroll, services will be provided by Service Company employees as needed by the Company. These services shall include but shall not be limited to any line work, meter reading, customer service functions (including a customer call center), planning, construction, operations, and maintenance of facilities.
Corporate Security. All services identified above shall be provided to GMAC Bank and its subsidiaries at no charge.
Corporate Security. 5. Certain other services in addition to the above as the Service Company may be able to provide and/or the Company may require or request.
Corporate Security. ● These questions refer to the existing environment in which the proposed system will be used. ● Software and Asset Inventory ○ Do you track what hardware is used by your staff? ○ Do you have a policy on how that hardware should be used? ○ Do you maintain a list of approved software on staff computers? ○ Is this enforced by any automated systems? ● Account Management ○ Where are account credentials managed? ○ Do staff use a password manager? ○ Do you perform periodic audits of account access to ensure that only the right people have the access they need? ● Access Control Management ○ Do you have an organization-wide single-sign-on (SSO) provider? ■ How widely is SSO utilized for services your staff uses regularly? ■ Will your proposed system be connected to SSO? ○ Do you require multi-factor authentication for staff? ● Vulnerability Management ○ Describe any policies for keeping software up to date, particularly regarding security updates. Is this enforced by software? ○ Do you maintain an inventory of devices on local networks? ■ How often is it updated? ■ How often is it audited for accuracy? ● Security Awareness and Skills Training ○ Do you provide security awareness training for staff? ○ Describe any training specific to certain roles. ● Service Provider Management ○ Do you maintain a list of third-party services that you use? 27 | G r a n t A g r e e m e n t ○ What process do you use to gauge the security practices of those services? ○ Do you identify any third-party services as a higher security risk than others? ● Incident Response Management ○ Do you have an incident response process? ○ Describe any recent instances in which this process has been used. ○ Do you run incident simulations to test the process? ○ Do you refine the policy based on incident responses?
Corporate Security. 5. Certain other services in addition to the above as Allegheny Power Service Corporation may be able to provide and/or AES may require or request.
Corporate Security. 5. Certain other services in addition to the above as Allegheny Power Service Corporation may be able to provide and/or AYP Energy may require or request.
Corporate Security. Company employees who work at the Corporate facility will be required to carry a personalized badge with their picture at all times. This bade will be used to access the company floors. A strict policy of no “tailgating” will be enforced – each corporate employee is required to use their own badge and to not let any person whether employee or not access to any floor. Security cameras have been installed in various locations throughout the corporate office and monitored to enable the company to monitor activity as needed.
Corporate Security. DEVICES If this box is checked, corporate users may only use a corporate security device when the corporate user is representing the Customer. “Corporate security device" means a device which cannot be used for the corporate user's private dealings with the Bank.
